Privacy Policy

01Who processes your data

The data controller is Spectrum Education [to be completed: exact legal name, company registration number, registered office], publisher of the platform available at spectrum-educ.online.

For any question about your data, the single point of contact is [email protected].

02The data we collect

We only collect what the platform needs in order to work. Three families of data coexist:

• Account data: last name, first name, e-mail address, password (never stored in clear text), profile picture and cover image if you add one.
• Educational profile data, all optional: education system, level and stream, institution, priority subjects, learning objective.
• Usage data: exams viewed, favourites, collections, contributions, proposed solutions, syntheses, comments and reactions.
• Technical data: IP address, browser and device type, sign-in timestamps, error logs and active sessions.

03Why we process it

Every processing operation serves a specific purpose and rests on an identified legal basis:

• Providing the service — account creation, authentication, access to exams, collections and favourites: performance of the contract between us.
• Personalising exam recommendations from your educational profile: your consent, which you can withdraw at any time by clearing those fields.
• Keeping the platform safe — abuse detection, bot protection, antivirus scanning of uploaded files, sign-in logging: our legitimate interest in protecting the platform and its users.
• Moderating published content and handling reports: our legitimate interest in maintaining a trustworthy library.
• Replying when you contact us, and notifying you of activity that concerns you: performance of the contract and legitimate interest.

04Contributions and public visibility

A contribution — an uploaded exam, a solution, a synthesis, a comment — is public by nature: it is visible to every visitor, including those without an account, and is tied to your display name and profile picture.

Your public profile (/user/your-id) shows those elements along with your bio, location and whichever links you chose to fill in. What you leave out does not appear.

Deleting a contribution removes it from the platform, but copies a third party may have made in the meantime are beyond our control.

05Cookies and trackers

The platform uses no advertising cookie and sells no data to advertisers. What is stored:

• A strictly necessary session cookie that keeps you signed in from page to page. Without it, authentication does not work.
• Local storage remembering your language and theme (light or dark). It never leaves your browser.
• Google reCAPTCHA on public forms, to tell a human from a bot. Google processes data on that occasion under its own privacy policy.

06Who has access

Your data is neither sold, rented nor traded. Access is limited to:

• Members of the Spectrum team who need it — support, moderation, technical operations — and only to that extent.
• Our technical providers, bound by contract and acting on our instructions: server and database hosting, file storage, e-mail delivery, search engine, antivirus scanning.
• Judicial or administrative authorities, where a valid legal request compels us.

07How long we keep it

• Account and profile: for as long as the account is active, then twelve months after deletion, to handle any dispute.
• Public contributions: they remain online after account deletion, dissociated from your identity, unless you expressly ask for their removal.
• Technical logs and sessions: twelve months at most.
• Messages sent through the contact form: three years from the last exchange.

08How we protect it

Exchanges with the platform are encrypted in transit (HTTPS). Sensitive database fields are encrypted at rest, and passwords are stored only as hashes computed with an algorithm designed for that purpose.

Access to production systems is named and restricted. Uploaded files are scanned by an antivirus before being made available.

No system is infallible: should a data breach be likely to create a risk to your rights, we will inform you and the competent authority.

09Your rights

You have the following rights over your data at any time:

• Access it and obtain a copy.
• Have it corrected when inaccurate — most of it can be edited directly under Profile › Settings.
• Request its erasure, which entails deleting the account.
• Object to processing based on our legitimate interest, or request its restriction.
• Withdraw your consent for the processing that depends on it, without affecting what was done beforehand.
• Obtain the portability of the data you provided to us.

10Minors

The platform is aimed at pupils and students, some of whom are minors. A minor may create an account with the agreement of the person holding parental authority, who may at any time ask us for access to the account data or for its deletion.

We never ask a minor for data beyond what the service requires, and send them no commercial solicitation.

11Hosting and transfers

Data is hosted with our infrastructure providers [to be completed: hosting provider and country]. Some providers may be established outside the user's country of residence; in that case we make sure the transfer is covered by appropriate contractual safeguards.

12Changes to this document

This policy may change to reflect developments in the platform or in the law. The last-updated date appears at the top of the page; where a change is substantial, registered users are informed by e-mail or through an in-app notification.