Website privacy

Who is responsible

The controller is VIRCIT OÜ, registry code 14628908, Vesivärava tn 50-201, 10152 Tallinn, Estonia. For privacy questions and rights requests, email app@vircit.com.

Reading the catalogue

The catalogue serves static pages and local images. It has no visitor accounts, contact forms, payments, advertising, third-party embeds or external fonts. Its code does not set cookies or use local storage to identify visitors or remember choices.

Cloudflare Pages hosts this catalogue and provides network delivery and security. Opening a page sends technical request information such as your IP address, requested URL, request time and browser information to Cloudflare. We use this processing to deliver the website, diagnose failures and protect against abuse, based on our legitimate interest in a reliable and secure website under Article 6(1)(f) GDPR. We do not run visitor analytics or maintain a separate application-level visitor access-log store for this catalogue.

Cloudflare retains technical information according to its processing purposes and relevant legal requirements. Its published retention criteria consider the purpose, nature and sensitivity of the information, security risks, whether the purpose can be met with less information, and legal or contractual requirements. See Cloudflare’s Privacy Policy for its processing and retention details, including its own network and security processing. We do not promise a single fixed retention period for all network data.

Cloudflare is a global provider and may process information outside the EEA. Its published Privacy Policy describes the EU–US Data Privacy Framework and Standard Contractual Clauses used for relevant transfers. Its Customer Data Processing Addendum applies to processing on customers’ behalf and provides SCCs for restricted transfers. Those documents explain the safeguards and how to obtain further information; you can also contact us about your data. These arrangements do not mean all data stays in the EEA.

When you email us

When you email app@vircit.com, we process your email address, any name you provide, your message and attachments to answer and follow up on your enquiry. Our basis is our legitimate interest in handling enquiries under Article 6(1)(f), or Article 6(1)(b) for steps you request before a contract. Providing information is voluntary, but we need a usable reply address and enough detail to respond.

We use Proton Mail for this mailbox. Our domain also has Zoho backup mail servers configured; a backup service may process a message if it receives it. Email services process the message and technical delivery information for mail delivery, storage and security. See Proton’s privacy information and Zoho’s privacy information. Ordinary email from another provider is not necessarily end-to-end encrypted. Please avoid sending passwords, session credentials or unnecessary sensitive information.

We retain correspondence while needed to answer and follow up on the enquiry, support an active relationship or resolve a related issue. Relevant records may be retained while needed to establish or defend a legal claim or meet an applicable record-keeping duty. Correspondence that no longer serves those purposes is deleted. Provider backup and recovery copies can remain for their applicable deletion cycles. This does not mean all emails are erased after a fixed number of days.

Opening a game

Following a Play link opens Sudoku Mates, which has player profiles, server game data and browser storage. Those behaviours are separate from this catalogue. Read the Sudoku Mates privacy policy for current game-data, account, retention, advertising and deletion details. Catalogue visits do not grant consent in a game.

Your rights

Subject to the relevant legal conditions, you may request access, correction, erasure, restriction and portability, and object to legitimate-interest processing. Contact app@vircit.com. We may need limited information to identify the correct request. Do not send passwords or game credentials.

You can complain to the Estonian Data Protection Inspectorate or the relevant authority in your EU/EEA country of residence, work or the alleged infringement. If processing changes, we will update this notice.