Privacy Policy LT

This privacy policy explains how Skenuok.lt collects, uses, stores, and protects your personal data when you use our websites (skenuok.lt, app.skenuok.lt) and services.

1. Data Controller

Skenuok.lt – cryptocurrency trading analysis platform.
Responsible person: Martynas Glyunas
Email: admin@skenuok.lt

2. Data We Collect

2.1. Account data

• Username, nickname, password hash (bcrypt — we never store plaintext)
• Account creation date, last login
• Membership expiry, internal role (user/admin)
• Email address (if provided during registration)

2.2. Usage analytics

• Google Analytics 4 (GA4) — anonymized page views, sessions, device type
• Pages visited, academy question answers, exam results
• IP address (anonymized via GA4 IP anonymisation)

2.3. Advertising targeting data

• Google Ads — conversion tracking, enhanced conversions (hashed user ID)
• Meta (Facebook/Instagram) — planned: Conversions API
• TikTok Ads — planned: Events API
• UTM parameters (utm_source, utm_medium, utm_campaign), gclid, fbclid, ttclid — for attribution

2.4. Payment data

Payments are processed via the external membership platform narystes.eu. Skenuok.lt does not directly store bank cards, accounts, or payment instrument data.

3. Legal Basis (GDPR Art. 6)

Purpose	Basis
Account management, service delivery	Contract performance (6.1.b)
Analytics and improvements	Legitimate interest + consent (6.1.a, 6.1.f)
Advertising and personalization	Consent (6.1.a)
Legal obligations	Legal obligation (6.1.c)

4. Cookies

We use cookies based on your choice via the cookie consent banner. See the separate Cookie Policy for details on each category.

5. Third-Party Processors

• Google LLC (Google Analytics, Google Ads, Google Tag Manager) — USA. Transfers based on Standard Contractual Clauses (SCC) and EU-US Data Privacy Framework.
• Meta Platforms Ireland Ltd — planned Meta Pixel + CAPI integration. EU jurisdiction.
• TikTok Pte Ltd — planned TikTok Events API integration. Singapore + EU.
• narystes.eu — payment and subscription processing. EU jurisdiction.
• Hostinger — website hosting. EU jurisdiction.

6. Data Retention

Data category	Retention
Account data (active)	Until account deletion
Account data (post-deletion)	30 days in backups, then anonymized
Google Analytics data	14 months (GA4 default)
UTM attribution cookies	90 days (first-touch), session duration (last-touch)
Cookie consent record	12 months or until re-prompt
Payment history (narystes.eu)	Per narystes.eu policy, 10 years for accounting

7. International Data Transfers

Some service providers (Google, TikTok) may process data outside the EU/EEA. Such transfers are based on:

• European Commission-approved Standard Contractual Clauses (SCC)
• EU-US Data Privacy Framework (where applicable)
• Additional technical and organizational safeguards

8. Your Rights (GDPR Art. 15–22)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access (Art. 15) — know what data we process about you
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure / "right to be forgotten" (Art. 17) — request data deletion
• Right to restriction (Art. 18) — restrict processing
• Right to data portability (Art. 20) — receive data in a structured format
• Right to object (Art. 21) — object to processing (always for marketing)
• Automated decision-making (Art. 22) — not to be evaluated solely by an algorithm
• Right to withdraw consent (Art. 7.3) — withdraw consent at any time

To exercise these rights, email admin@skenuok.lt. We respond within 30 days.

9. Complaints

If you believe your data protection rights have been violated, you have the right to file a complaint with the Lithuanian State Data Protection Inspectorate (VDAI):

10. Security

Reasonable technical and organizational safeguards are applied:

• HTTPS encryption for all network traffic
• Passwords stored only as bcrypt hashes (cost factor 12)
• Regular database backups
• Role-based access control

11. Policy Changes

This policy may be updated over time. Material changes will be posted on the site and notified to registered users via email (if provided).

12. Contact

Questions about this policy or personal data processing: admin@skenuok.lt