Version of 6 August 2026 · applies to skolbera.com
This document follows the General Data Protection Regulation of the European Union - GDPR, Regulation (EU) 2016/679. We did not choose it as a formality: the database holding your data physically sits in Frankfurt, that is, inside the European Union, and GDPR is the strictest standard there is. Whoever meets it usually meets the requirements of other countries too. We have tried to write this document in plain language: if anything has stayed unclear, write to us and we will explain it.
The owner of the personal data held here, and the data controller for it, is the Skolbera project (the site skolbera.com). The contact for any question about the processing of data, including withdrawing consent and making a complaint: hello@skolbera.com.
We try to collect the minimum. The full list:
We do not collect special categories of data: anything about health, religious or political beliefs, biometrics, genetic data. We do not ask for documents, a telephone number or a home address. We do not use children's data: registration is open from the age of 16.
We do not use your data for advertising, and we neither sell it nor pass it to schools. A school will never learn from us who wrote a review.
We use services without which the site would not run. Each of them receives only what it needs in order to work:
Data is passed to state authorities only on a reasoned request made in accordance with the law.
Your data is stored on servers in Frankfurt, Germany - which is inside the European Union. No transfer outside the EU is needed for the site to work: both the database and the backups stay here.
There is one exception - the two visitor counters, Google Analytics and Yandex.Metrica. Both are switched on only with your separate consent. The detail is in section 9.
If we ever need to move the database to another country, we will write about it here in advance and explain on what basis.
Under Articles 15-21 of GDPR you have the right to:
Write to hello@skolbera.com from the address the account is registered to. By law we have one month to answer, though we usually answer within a couple of days. If the request is a complex one, the period may be extended by a further two months - we will then tell you so within the first month and explain why. A refusal, should there be one, will be in writing and with reasons, and will say where it can be appealed.
A word about the consents: at registration we ask for them with two different tick boxes - one for the processing of data and one for the rules on publishing reviews. We record when you ticked them and which version of the text you saw at the time, so that a year later we can say exactly what you agreed to. You have the right to ask for that record together with the rest of your data.
Consent to the mailing can be withdrawn without writing to us at all: there is an "unsubscribe" link in every issue.
If a leak does happen, we will notify the competent authority within 24 hours of discovering it and pass on detailed information within 72 hours, as the rules on cross-border transfers require. We will write to the users affected ourselves.
Essential cookies. They are needed for the site to work: they hold your session, so that you do not have to sign in again on every page, and they remember your answer to the question about analytics. The site does not work without them, so they require no consent. There are no advertising cookies on the site.
Web analytics: Google Analytics 4. We want to know which parts of the ranking people use and which are of no use to anyone. For that we have connected Google Analytics 4. It collects anonymised statistics: which pages were opened, in what order, how long people stayed, which site or search query they came from, the type of device, the language of the browser, and the country and city from the IP address. We ask Google to truncate the full IP address, and we have switched off advertising features and the sharing of data for advertising. Google Analytics does not receive your name, your email address or the content of your reviews.
Web analytics: Yandex.Metrica. A second visitor counter, connected on 14 September 2026. It collects the same as the first: which pages were opened, in what order, how long people stayed, where they came from, the type of device, the language of the browser, and the country and city from the IP address. On top of that, Metrica has "Webvisor" switched on - it records how you moved the mouse, how you scrolled the page and where you clicked. We have switched off the recording of field contents: what you type in the sign-in, registration and review forms is neither recorded by Metrica nor received by it. It does not receive your name, your email address or the content of your reviews either.
Only with your consent. Until you have pressed "Accept" in the bar that asks about analytics, neither of the two counters is loaded onto the site at all: not one request goes to Google's servers or to Yandex's, your IP address included. If you chose "Essential only", analytics does not exist for you, and the site works in exactly the same way.
How to change your mind. In the footer of any page there is a "Data settings" link: it brings back the same question, and you can answer it differently. Withdrawing consent takes effect from the moment you press it and applies to the future; the anonymised statistics already collected we will not be able to delete from Google's and Yandex's reports, because they are not tied to you.
Where the data goes. The operator of Google Analytics is Google LLC, and its servers are in the United States. That is a transfer outside the European Union, and under GDPR it needs a lawful basis of its own. We ask Google not to collect the full IP address and not to use the data for advertising, but that is not enough. So we ask for your consent as a separate question: that consent is the basis for such a transfer under Article 49 of GDPR. Until you have pressed "Accept", nothing goes to Google - the script is not even loaded.
The same goes for the second counter: the operator of Yandex.Metrica is Yandex LLC, and its servers are in Russia. This too is a transfer outside the European Union, and its basis is the same - your consent under Article 49 of GDPR. Until you have pressed "Accept", nothing goes to Yandex.
The terms of processing on Google's side are set out in its privacy policy at policies.google.com/privacy, and on Yandex's side at yandex.ru/legal/confidential. There are no social network advertising pixels on the site, and advertising features are switched off in both counters. We do use recording of what happens on screen - that is Metrica's "Webvisor" - but without the contents of fields; what exactly it records is said above. If the set of counters changes, we will write about it here and ask for consent again.
We may change this document: laws change, services change. The date of the version is always at the top of the page. If a change touches your rights or the set of data we collect, we will write you an email before it takes effect.
By carrying on using the site after a change has taken effect, you agree to the new version. If you do not agree, write to us and we will delete the account.