Privacy Policy LT
This privacy policy explains how Skenuok.lt collects, uses, stores, and protects your personal data when you use our websites (skenuok.lt, app.skenuok.lt) and services.
1. Data Controller
Skenuok.lt – cryptocurrency trading analysis platform.
Responsible person: Martynas Glyunas
Email: admin@skenuok.lt
2. Data We Collect
2.1. Account data
- Username, nickname, password hash (bcrypt — we never store plaintext)
- Account creation date, last login
- Membership expiry, internal role (user/admin)
- Email address (if provided during registration)
2.2. Usage analytics
- Google Analytics 4 (GA4) — anonymized page views, sessions, device type
- Pages visited, academy question answers, exam results
- IP address (anonymized via GA4 IP anonymisation)
2.3. Advertising targeting data
- Google Ads — conversion tracking, enhanced conversions (hashed user ID)
- Meta (Facebook/Instagram) — planned: Conversions API
- TikTok Ads — planned: Events API
- UTM parameters (utm_source, utm_medium, utm_campaign), gclid, fbclid, ttclid — for attribution
2.4. Payment data
Payments are processed via the external membership platform narystes.eu. Skenuok.lt does not directly store bank cards, accounts, or payment instrument data.
3. Legal Basis (GDPR Art. 6)
| Purpose | Basis |
|---|---|
| Account management, service delivery | Contract performance (6.1.b) |
| Analytics and improvements | Legitimate interest + consent (6.1.a, 6.1.f) |
| Advertising and personalization | Consent (6.1.a) |
| Legal obligations | Legal obligation (6.1.c) |
4. Cookies
We use cookies based on your choice via the cookie consent banner. See the separate Cookie Policy for details on each category.
5. Third-Party Processors
- Google LLC (Google Analytics, Google Ads, Google Tag Manager) — USA. Transfers based on Standard Contractual Clauses (SCC) and EU-US Data Privacy Framework.
- Meta Platforms Ireland Ltd — planned Meta Pixel + CAPI integration. EU jurisdiction.
- TikTok Pte Ltd — planned TikTok Events API integration. Singapore + EU.
- narystes.eu — payment and subscription processing. EU jurisdiction.
- Hostinger — website hosting. EU jurisdiction.
6. Data Retention
| Data category | Retention |
|---|---|
| Account data (active) | Until account deletion |
| Account data (post-deletion) | 30 days in backups, then anonymized |
| Google Analytics data | 14 months (GA4 default) |
| UTM attribution cookies | 90 days (first-touch), session duration (last-touch) |
| Cookie consent record | 12 months or until re-prompt |
| Payment history (narystes.eu) | Per narystes.eu policy, 10 years for accounting |
7. International Data Transfers
Some service providers (Google, TikTok) may process data outside the EU/EEA. Such transfers are based on:
- European Commission-approved Standard Contractual Clauses (SCC)
- EU-US Data Privacy Framework (where applicable)
- Additional technical and organizational safeguards
8. Your Rights (GDPR Art. 15–22)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access (Art. 15) — know what data we process about you
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure / "right to be forgotten" (Art. 17) — request data deletion
- Right to restriction (Art. 18) — restrict processing
- Right to data portability (Art. 20) — receive data in a structured format
- Right to object (Art. 21) — object to processing (always for marketing)
- Automated decision-making (Art. 22) — not to be evaluated solely by an algorithm
- Right to withdraw consent (Art. 7.3) — withdraw consent at any time
To exercise these rights, email admin@skenuok.lt. We respond within 30 days.
9. Complaints
If you believe your data protection rights have been violated, you have the right to file a complaint with the Lithuanian State Data Protection Inspectorate (VDAI):
Phone: +370 5 271 2804
Email: ada@ada.lt
Web: vdai.lrv.lt
10. Security
Reasonable technical and organizational safeguards are applied:
- HTTPS encryption for all network traffic
- Passwords stored only as bcrypt hashes (cost factor 12)
- Regular database backups
- Role-based access control
11. Policy Changes
This policy may be updated over time. Material changes will be posted on the site and notified to registered users via email (if provided).
12. Contact
Questions about this policy or personal data processing: admin@skenuok.lt