Scope and responsibility
This policy applies to the public website, registered accounts, learning features, support, payments, certificates, and stationery orders operated by The Soraninmunay.
Information we collect
We may collect names, email addresses, phone numbers, school and grade details, guardian details, identity-verification records, profile photos, account settings, course activity, assessment results, support messages, order and delivery details, payment references, IP addresses, device/browser data, security events, and cookie identifiers.
How we use information
Information is used to create and secure accounts; deliver courses and orders; verify identity and certificates; process and reconcile payments; calculate teacher earnings; provide support; prevent fraud, piracy, and account sharing; maintain audit records; improve services; and comply with legal obligations.
Payments
Payment providers may process transaction details under their own privacy terms. We normally retain payment status, amount, provider, reference, timestamps, and reconciliation records, but we do not need to store a customer’s complete card or wallet credentials.
Sharing and service providers
Information may be shared only as reasonably necessary with authorized school staff, relevant teachers, stationery operators, assigned delivery personnel, hosting and communications providers, payment processors, security vendors, professional advisers, or authorities where legally required. We do not sell personal contact information.
Measurement services and your choice
Google Analytics 4 is optional. The analytics popup and floating preferences button have been removed. Browsing does not grant consent. New visitors are not tracked; previously recorded, unexpired consent is still checked before Google Analytics loads. Clear this site’s browser data or enable Global Privacy Control or Do Not Track to stop subsequent browser tracking. Essential service and security records continue to operate. No Meta Pixel is installed.
What measurement sends and stores
After consent, GA4 can receive page categories, public catalog IDs, currency, order totals, pseudonymous transaction references, interaction events, and browser/device information. Google necessarily receives network information when your browser connects. We do not intentionally send names, emails, phone numbers, account IDs, certificate numbers, private URLs, search terms, or form values. Confirmed conversions are queued privately for at most 30 days and delivered when the consenting browser returns. The queue is linked to the account only to deliver its events and is not sent to Google as a user ID. Events before consent are not backfilled; withdrawing clears this browser’s pending events. Google processing may occur outside your country.
Analytics and preference storage
The essential measurement_consent cookie and local preference storage remember your choice for 180 days, including rejection. With permission, Google may set _ga and _ga_* analytics cookies, configured here for up to 180 days without extending their lifetime on each visit. A local list of dispatched event references prevents repeat submissions for up to 30 days. These references contain no names or contact details. Withdrawing consent blocks further measurement and removes accessible Google analytics cookies and local dispatch references. It does not automatically erase data already received by Google; contact support about a data request. GA4 property retention and sharing settings are controlled by the organization in Google Analytics.
Search visibility tools
Google Search Console and Microsoft Bing Webmaster Tools use site-ownership verification to report search visibility, indexing, queries, crawl issues, and field performance when available. Verification tags and DNS records do not install visitor analytics cookies. The site also performs scheduled checks of public sitemap URLs and keeps privacy-limited 404 records. These checks do not submit student records to search services.
Retention and security
Records are retained for only as long as reasonably needed for education, service delivery, accounting, dispute resolution, safety, fraud prevention, backups, and legal compliance. Safeguards include HTTPS, access controls, hashed passwords and tokens, role permissions, audit logs, restricted private files, and backup controls; no online system can promise absolute security.
Your choices and rights
Subject to applicable law and necessary verification, you may ask to access, correct, update, or delete eligible personal information, object to optional marketing, or ask questions about retention and sharing. Some records must be preserved for security, certification, accounting, disputes, or legal obligations.
Children and students
Student information receives additional care. Where a learner cannot legally provide consent alone, a parent, guardian, school, or other authorized representative should provide the necessary permission. Student data must not be used for personalized advertising where prohibited.
Contact and updates
Privacy requests may be sent to info@soraninmunay.cloud. We may update this policy when services or legal requirements change; material changes will be communicated appropriately and the current effective date will remain visible.