Privacy Policy

Effective date: July 20, 2026

Syrax Academy ("Syrax Academy", "we", "us") is an online platform for learning C# and Unity development, operated by Five Attempt Studio. This Privacy Policy explains what personal data we collect when you use the Syrax Academy web application (the "Service"), why we collect it, and the choices you have.

Contact for all privacy matters: fiveattemptstudio@gmail.com

1. Data We Collect

1.1 Account data (Google Sign-In)

Syrax Academy uses Google Sign-In as its only authentication method. When you sign in, we receive from your Google account:

• your name,
• your email address,
• your profile photo URL,
• a unique account identifier (UID).

We never see or store your Google password. Authentication is handled by Firebase Authentication, a Google service.

1.2 Profile and learning data

When you first sign in, a profile record is created for your account. It contains:

• the account data listed above;
• account creation and update timestamps;
• your learning progress (which lessons you have completed and the lesson you are currently on);
• your subscription plan and its status;
• your settings: display name, interface language, theme, and notification preferences;
• a history of changes to your subscription (plan, status, date, and who made the change), kept as an audit log.

1.3 Content you create

• Notes. Personal notes you write in the Notes panel. Notes are private to your account and are not visible to other users.
• Lesson and block reviews. A difficulty rating, a quality rating (1–5), and an optional comment (up to 1,000 characters). Reviews are visible only to you and to the Syrax Academy administrator. Publicly, only anonymous aggregated averages are shown.
• Feedback messages. If you use the feedback form, we store your message (up to 4,000 characters) together with your account email so we can respond.

1.4 Payment data

Paid access is sold by Paddle, which acts as our Merchant of Record. When you buy a plan, your payment details (card number, billing address, tax information) are collected and processed by Paddle under its own privacy policy — we never receive or store your full payment card details. We receive from Paddle only what is needed to activate your access: transaction status, plan purchased, and the identity of the purchasing account.

Paddle's privacy policy: https://www.paddle.com/legal/privacy

1.5 Usage and technical data

• Firebase Analytics. We use Google's Firebase Analytics to understand how the Service is used (pages viewed, sessions, general device and browser information, approximate location derived from IP address, and a device identifier). This data is aggregated and is not used to build advertising profiles.
• Hosting logs. The Service is delivered through Firebase Hosting. Like any web server, it processes your IP address and browser information to serve the site securely.

1.6 Data stored only on your device

Some data is stored in your browser's local storage and never leaves your device: cached learning progress, cached notes, notification read/dismissed state, pinned-note positions, and interface preferences (such as the notes panel size). See the Cookie & Local Storage Policy for the full list.

2. How We Use Your Data

We use the data above to:

• create and maintain your account and sign you in;
• save and synchronize your learning progress across devices;
• provide paid content to accounts with an active subscription;
• store and synchronize your notes;
• show you in-app notifications according to your notification preferences;
• display the interface in your chosen language and theme;
• process your reviews and feedback and improve the course;
• activate purchases and manage subscriptions;
• keep the Service secure, prevent abuse, and comply with legal obligations;
• understand aggregate usage of the Service through analytics.

We do not sell personal data, show third-party advertising, or use your data for advertising purposes.

3. Legal Bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (account, progress, notes, subscriptions, notifications); legitimate interests (security, abuse prevention, aggregate analytics, service improvement); consent where required by local law; and legal obligation (tax and accounting records related to purchases, held primarily by Paddle).

4. Who We Share Data With

• Google / Firebase — authentication, database (Firestore), hosting, and analytics infrastructure. Google processes this data on our behalf. See https://firebase.google.com/support/privacy
• Paddle — payment processing as Merchant of Record. Paddle is an independent controller of the payment data it collects. See https://www.paddle.com/legal/privacy

We do not share personal data with anyone else, except if required by law or to protect the rights, safety, or property of Syrax Academy or its users.

5. International Transfers

Google and Paddle operate global infrastructure, so your data may be processed outside your country of residence, including in the United States and the European Union. Both providers implement recognized transfer safeguards (such as Standard Contractual Clauses).

6. Data Retention

• Account, profile, progress, notes, reviews, and feedback: kept while your account exists, then deleted as described in the Account & Data Deletion Policy.
• Subscription audit records and transaction data: kept as long as required for tax, accounting, and dispute-resolution purposes.
• Analytics data: retained according to Firebase Analytics retention settings and then deleted or aggregated.
• Device-local data: remains on your device until you clear your browser storage.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, restrict, object to the processing of, or delete your personal data. You can:

• delete your account directly in the app (Settings → account section), or
• email fiveattemptstudio@gmail.com from your account email with any privacy request.

We respond within 30 days. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

8. Security

Data is transmitted over TLS. Access to stored data is restricted by Firestore Security Rules: your profile, progress, notes, and reviews are readable only by you and the Syrax Academy administrator; paid content is readable only by accounts with an active subscription; write access is validated server-side. Payment data is secured by Paddle.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or under the higher minimum age set by your country). If you are a minor above that age, you may use Syrax Academy only with the consent of a parent or legal guardian. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to This Policy

If we change this Policy, we will update the effective date above and, for material changes, announce it through the in-app notification system. Continued use of the Service after a change means you accept the updated Policy.

11. Contact

Five Attempt Studio — fiveattemptstudio@gmail.com