Privacy Policy

Last updated: January 2026

At Kactica, we take the protection of your personal data seriously. This privacy policy explains how we collect, use, store, and protect your information when you use Train With Docker, our Docker and Docker Swarm training platform.

1Data We Collect

Account data: name, email address, profile picture (optional), language preference
Authentication data: OAuth information if you sign in via GitHub or Google (account ID, access tokens)
Session data: IP address, user-agent (browser/device), login timestamps
Learning data: scenario progress, quiz scores, practice attempts, unlocked achievements
Payment data: Stripe identifiers (customer ID, subscription ID), transaction history. We never store your banking information directly.
Docker technical data: container and network identifiers, resource allocation (CPU, memory), session duration and status
Feedback data: bug reports, suggestions, browser metadata (screen size, user-agent)

2Purposes of Processing

Provide and maintain the Train With Docker service
Manage your account and authentication
Process your payments and manage your subscription
Track your learning progress and unlock achievements
Create and manage your isolated Docker environments
Send you transactional emails (verification, password reset, confirmations)
Improve the platform through usage analysis
Ensure security and prevent abuse

3Legal Basis (GDPR)

Contract performance: processing necessary to provide you the service (account, Docker sessions, progress)
Consent: for marketing communications (you can unsubscribe at any time)
Legitimate interests: to improve our service, ensure security, and prevent fraud
Legal obligations: retention of transaction data according to tax regulations

5Data Retention

Account data: retained for the lifetime of your account, deleted upon request
Payment data: retained according to legal obligations (typically 10 years for accounting documents)
Docker sessions: automatically deleted when the session expires
Technical logs: retained for a maximum of 90 days
Learning data: retained as long as your account is active

6Your Rights (GDPR)

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate or incomplete data
Right to erasure: request deletion of your data ('right to be forgotten')
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on our legitimate interests
Right to withdraw consent: at any time for consent-based processing
Right to lodge a complaint: file a complaint with your local data protection authority if you believe your rights are not being respected

7Cookies and Similar Technologies

Essential cookies: necessary for site operation (session, authentication, language preferences)
Analytics: Umami is a privacy-friendly solution that does not set cookies and does not collect any personal data. No consent banner is required as Umami is GDPR-compliant by design.
We do not use advertising cookies or third-party tracking
You can manage your cookie preferences through your browser settings

8Data Security

HTTPS encryption for all communications
Passwords hashed with secure algorithms (never stored in plain text)
Secure authentication tokens with automatic expiration
Complete isolation of Docker environments between users
Restricted data access following the principle of least privilege
Regular security monitoring and audits

9Changes to This Policy

We may update this privacy policy periodically
Significant changes will be notified by email or via a notification on the platform
The last update date is shown at the top of this page
We encourage you to review this policy regularly

10Contact Us

For any questions about this policy or your personal data
To exercise your GDPR rights
Email: [email protected]
We commit to responding to your request within 30 days

Data Controller

Kactica

Email: [email protected]