Privacy Policy

Last updated: March 2026

1. Data Controller

This website (rbmk.net) is operated by Arti Rozenberg as a free educational project. For data-related inquiries, contact us via the contact form.

2. What Data We Collect

Contact Form Submissions

When you submit the contact form, we collect:

  • Your name and email address (to respond to your inquiry)
  • Your message content
  • A hashed version of your IP address (for abuse prevention, we never store your raw IP)
  • Timestamp of submission

Gameplay Sessions

When you use the interactive simulation modes, we create an anonymous session to track your progress. This includes:

  • A randomly generated session token (not linked to your identity)
  • Mode and scenario selected
  • Decisions made during gameplay
  • Session outcome
  • A hashed version of your IP address

No personally identifiable information is collected during gameplay.

Cookies

  • Essential: Cookie consent preference (1 year). Required for site functionality.
  • Optional: If you accept all cookies, we may use anonymous usage analytics to improve the educational experience. No third-party tracking cookies are used.

3. Why We Collect Data

  • Contact form data: To respond to your inquiries and for record-keeping
  • Session data: To improve the educational simulation experience through anonymous analytics
  • IP hashes: For abuse prevention and rate limiting

4. How We Process Data

  • Storage: All data is stored in an SQLite database on our server
  • Email: Contact form submissions trigger transactional emails via Brevo (formerly Sendinblue). Brevo processes your email address solely to deliver these emails.
  • No third-party sharing: We do not sell, trade, or share your data with any third parties beyond the email delivery service

5. Data Retention

  • Contact form submissions: Automatically deleted after 12 months
  • Gameplay sessions: Automatically deleted after 6 months
  • Cookie preferences: Stored for 1 year

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access: Request a copy of any personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data
  • Export: Receive your data in a portable format
  • Objection: Object to processing of your data
  • Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, please use the contact form or email us directly. We will respond within 30 days.

7. Security

We implement appropriate technical measures to protect your data, including HTTPS encryption, secure headers, rate limiting, and IP hashing. Our server is protected by a firewall and receives automatic security updates.

8. Children's Privacy

This educational website is designed for general audiences. We do not knowingly collect personal information from children under 16. If you believe a child has submitted personal data, please contact us for immediate deletion.

9. Cookie Preferences

Your current consent level: Not set

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the site after changes constitutes acceptance.