Privacy Policy

Version 2026-10-22. This page is provided in English. Please contact us for clarification in your preferred language.

1. Scope and controller

This notice explains how the website operator identified above processes personal information when you visit LONGVIEW ACADEMY, register for its free educational library or contact us. The operator is the data controller for registration data. If you have questions, use the privacy contact above.

2. Information collected

When you register, we collect your full name, email address, international telephone number, an approximate country or calling region inferred from that number, a securely hashed password, registration IP address, approximate city and country derived from IP geolocation (not GPS), an optional VPN/proxy network-risk lookup result (which is marked not checked when unavailable), a randomly assigned first-party browser identifier stored only as a keyed hash on our server, a broad device type (desktop, mobile or tablet), operating system and browser family inferred from User-Agent, registration date and an acknowledgement of this privacy notice. We store whether you separately opted into educational emails. While you study, we save lesson-completion progress, account sessions, and security-related request metadata required to operate and defend the service. IP geolocation and phone-region inference are approximate and can be inaccurate.

3. Purposes and legal bases

Creating and maintaining your learning account, authenticating you and remembering progress are processed to provide the educational service you request (Article 6(1)(b) GDPR, insofar as objectively necessary). We use registration IP, approximate IP geolocation, optional IP VPN/proxy-risk results and a first-party security cookie to detect repeated account creation and restrict abuse (one active account per browser identifier, and at most three registrations per IP per 24 hours). These measures can produce false positives on shared devices or networks; contact us to request review. Clearing cookies or switching browsers can reset the identifier, so it does not uniquely identify a physical device. We do not use canvas, font, audio or other invasive hardware/browser fingerprinting. Necessary security safeguards may rely on legitimate interests (Article 6(1)(f)), subject to balancing. Optional educational marketing emails rely on your separately given consent (Article 6(1)(a)); you can withdraw that consent at any time in your account. Data required by applicable law may be processed to comply with a legal obligation (Article 6(1)(c)).

Telephone numbers: The current registration form requires an international phone number to support course-registration administration and infer a likely region. The operator must confirm a valid legal basis and whether requiring a number is genuinely necessary before enabling public registration. We do not ask for crypto wallets, exchange credentials, recovery phrases, card details or deposits.

4. Recipients and hosting

The website runs on Cloudflare Workers and uses Cloudflare D1 for account and learning records. The operator must review the applicable Cloudflare data processing terms, jurisdiction settings and possible international access or transfers. The operator has enabled synchronization of registration contact data with Zoho CRM in its EU region to manage educational enquiries. Passwords, password hashes, session tokens, and optional email-marketing consent are not sent to Zoho. Marketing preferences are retained in the protected site database and shown to the administrator and the account owner. When Zoho synchronization is enabled, the lead description may contain separately labelled registration IP, approximate city, VPN/proxy-check status and a shortened pseudonymous browser identifier for fraud review. If the operator creates custom Leads fields and configures their API names, IP, pseudonymous browser ID and VPN/proxy-check status can instead also be sent in separate Zoho fields. Standard Zoho City is populated from approximate IP geolocation if present. If an IPinfo token is configured, the visitor IP is transmitted to IPinfo solely for network-anonymity assessment; without that token this check is not performed. The operator must assess its hosting, CRM and communication processors, contracts and any transfers or access from outside the EEA before activation. If enabled, Cloudflare Turnstile processes necessary interaction, device and network metadata (potentially including IP address) to identify automated registrations; we verify a short-lived token with Cloudflare before creating a user account. We do not put Turnstile tokens into Zoho CRM. See Cloudflare Privacy Policy.

5. How long we keep information

Account and learning data are stored while your account remains active, and are removed from the primary application database when you delete your account, unless a specific legal retention obligation applies. Session cookies expire within seven days, anti-forgery cookies within approximately one hour and our first-party anti-abuse device cookie within 30 days. Registration IP, inferred city/country, VPN/proxy-check result and pseudonymous browser ID remain with the account until deletion, except where a specific legal retention duty applies; we do not retrospectively identify devices from older registrations. Platform security logs and infrastructure backups may have separate retention schedules administered by the hosting provider. If data was synchronized with Zoho CRM, deletion may require a queued remote deletion or manual review to protect other lawful CRM records. Please contact us if you need confirmation of completion.

6. Your choices and rights

In your account you can correct your name or phone number, download your stored data as JSON, update optional email consent and request account deletion. To ask for access, correction of your email address, erasure, restriction, portability, or object to certain processing, contact support@learnlongview.com. You may withdraw consent for optional emails without losing access to learning materials. You also have the right to lodge a complaint with your competent supervisory authority; see the European data protection authorities.

7. Security and limitations

We use HTTPS, password hashing, session-cookie protections, anti-forgery tokens and request throttling. Please use a unique password. No internet service can promise absolute security. Never share private keys, trading credentials or security codes with someone claiming to represent this educational site.

8. Automated decisions and amendments

We do not use personal data for automated decisions producing legal or similarly significant effects. Language and country inferred from phone codes are approximate convenience features. This notice may change if providers, retention, marketing or registration processes change; significant changes will be communicated where required.