Privacy Policy

Hodoron (https://hodoron.com) is an exam-prep e-learning platform. This policy explains what personal data we process under the EU General Data Protection Regulation (GDPR) and Czech law. For questions or privacy requests, contact info@hodoron.com.

Account & profile: email, username, display name, bio, avatar, authentication identifiers, and settings you choose.

Learning content: materials, paths, practice activity, progress, and other content you create or interact with on the platform.

Credits & payments: credit balances, purchase and transaction history, subscription status (Plus/Pro), and billing-related metadata. Card numbers are handled by Stripe; we do not store full payment card details.

Usage & device: approximate location derived from IP, browser/device type, pages visited, and product events needed to run and secure the service.

If you contact us, we keep the message content and the email you use so we can reply.

We process data to create and secure your account, deliver learning features, process payments and credits, show public profiles you choose to share, provide customer support, prevent abuse, and improve reliability and product quality.

Legal bases include performance of our contract with you (providing the service), legitimate interests (security, product improvement where proportionate), and consent where required (for example optional analytics cookies).

We do not sell personal data. We share data only with processors needed to operate Hodoron, as described below, or when required by law.

Supabase: authentication (email and Google OAuth when enabled) and database hosting for account, profile, content, and transaction records.

Stripe: payment processing for credit packs and Plus/Pro subscriptions. Stripe processes payment data under its own privacy policy.

PostHog (EU cloud): product analytics and session replay hosted in the European Union. We use this to understand feature usage and improve the product. Analytics that rely on non-essential cookies or similar storage run only with your consent where required.

Vercel: application hosting and delivery of the website.

These providers process data under their terms and applicable data processing arrangements. We configure them to the extent practical for operating Hodoron securely.

Essential: cookies and similar storage required to keep you signed in, protect sessions, and deliver core functionality. These are necessary for the product to work and do not require consent.

Analytics (optional): PostHog may set first-party cookies or use local storage for analytics and session replay. You can accept or dismiss the on-site analytics notice. Declining optional analytics does not affect essential cookies or your ability to use core features.

You can also clear cookies in your browser or contact us to opt out of analytics processing tied to your account.

Under GDPR you may request access to your personal data, correction, deletion, restriction of processing, and a portable copy (export) where applicable. You may object to certain processing and withdraw consent for optional analytics at any time.

To exercise these rights, email info@hodoron.com. You may also lodge a complaint with your local supervisory authority (in Czechia, the Úřad pro ochranu osobních údajů).

We keep account and profile data while your account is active. After deletion or a verified deletion request, we remove or anonymize personal data within a reasonable period, except where we must retain records for legal, tax, dispute, or security reasons (for example payment history).

Analytics events are retained according to our PostHog configuration and operational needs, then deleted or aggregated.

Primary analytics processing with PostHog is configured on EU cloud infrastructure. Some providers (for example Stripe, Google for OAuth, or hosting infrastructure) may process data outside the EEA. Where transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider's equivalent mechanisms.

Hodoron is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe a minor has created an account, contact us and we will take appropriate action.

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update means you acknowledge the revised policy.

Under GDPR, the data controller (správce) for Hodoron is Filip Surjomartono (OSVČ), IČO 21100659, registered place of business: Praha - Troja, Hnězdenská 586/16, 181 00, Czech Republic. Operating as Filip Surjomartono (OSVČ), operating Hodoron. Contact: info@hodoron.com.