Privacy Policy

Last updated: 3 July 2026

Arclara (“we”, “us”) operates arclara.com. This policy explains what personal data we process and your rights under the EU General Data Protection Regulation (GDPR) and comparable laws. We are the data controller for the data described below. Our servers are hosted in the EU (Finland).

1. What we collect

Account data (only if you sign in): your name, email address and profile picture, received from Google when you use “Continue with Google”. We never see your Google password.

Purchase records: which courses, books or licenses your account has access to, and when access was granted.

Technical logs: basic server logs (IP address, requested pages) kept briefly for security and reliability.

Browsing the public site requires no account and sets no tracking cookies.

2. Why we process it (legal basis)

We process account and purchase data to provide the service you asked for — signing in and accessing content you own (GDPR Art. 6(1)(b), performance of a contract). Security logging is our legitimate interest (Art. 6(1)(f)). We do not sell your data, run ads on your data, or profile you.

3. Cookies & analytics

We use only strictly necessary cookies: a session cookie so you stay signed in. No advertising cookies are set. Embedded lesson videos use YouTube’s privacy-enhanced player (youtube-nocookie.com), which does not set cookies until you press play; YouTube’s own privacy policy applies to playback.

For traffic statistics we run a self-hosted, cookieless instance of Umami on our own EU server. It counts page views in aggregate, sets no cookies, stores no personal identifiers, and shares nothing with third parties — which is why no consent banner is required.

4. Sharing & transfers

Sign-in is provided by Google (Google Ireland Ltd/Google LLC). Video lessons are streamed by YouTube. We share nothing else with anyone. Where a provider processes data outside the EU, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

5. Retention

Account and purchase data are kept while your account exists. Delete your account and they are removed immediately and permanently. Security logs rotate automatically.

6. Your rights

You can access, correct, export, or erase your data, object to or restrict processing, and lodge a complaint with your supervisory authority. Two of these are self-service on your account page: “Download my data” (export) and “Delete my account & data” (erasure). For anything else contact us at privacy@arclara.com.

7. Children

Arclara is intended for professional users aged 16 and over.

8. Changes

We will update this page when the policy changes; the date above reflects the latest revision.