Privacy statement

Effective from 06.11.2026.

Data controller

ROZI d.o.o., Andrije Kačića-Miošića 32, 43000 Bjelovar, OIB 50618403841. For any questions about your data, write to info@kriptoliga.eu.

What data we process and why

• Account: email, nickname and password hash, for signing in and password recovery. The legal basis is the contract for using the portal.
• Learning and demo: completed lessons, quiz results, virtual orders and balances, to run the school, demo exchange and league. The legal basis is the contract.
• League: your nickname and result are visible to all visitors, so do not use your real name as a nickname unless you want to.
• Visit statistics: pages viewed, time on page and reading depth, source of the visit, device and browser type, language, screen width and time zone. We recognise a guest by a daily hash of the IP address and browser, and we do not store the IP address in the statistics. For signed-in users, the visit is linked to the account. The legal basis is our legitimate interest in developing the portal.
• Security: IP address on a failed sign-in and on a password request, and a shortened network address with account events, to protect against abuse. The legal basis is legitimate interest.
• App: if the Android app crashes, it sends a technical description of the error, its version and the device model, so that we can fix it.

Email, nickname and password are required to open an account. Without them you can use the public part of the portal, but not an account. We get the data from you and from your use of the portal. We make no automated decisions with legal or similarly significant effects on you: the league ranking is only a practice result.

Objecting to visit statistics

If you do not want to be in the visit statistics, switch them off here. The choice is remembered in this browser. A browser with the Global Privacy Control signal on is excluded automatically. The visit is then not counted, and the technical record is deleted after 7 days.

Exclude me from statistics

How long we keep data

• We keep account data for as long as the account exists. You can request deletion of your account by email.
• We delete detailed visit statistics after 90 days. Daily totals without personal data are kept permanently.
• We delete records of failed sign-ins and password requests no later than two days after they are created.
• We keep database backups for no more than 30 days. Data from a deleted account may remain in them until that period ends.

Cookies and browser storage

We use a session cookie for signing in (up to 30 days), a cookie for the chosen language and browser storage for the display theme, followed coins and similar settings. We do not use advertising cookies or external tracking tools.

Who else is involved

• Hostinger: hosting of the portal and sending of email. The server is in Germany (Frankfurt).

The portal serves fonts and other files itself. We do not sell your data or give it to others for their marketing. Our server fetches the prices, so market data providers receive no data about you.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You can also lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr).

The portal is intended for people aged 18 or over.