Privacy Policy

Last updated: January 29, 2026

1. Introduction

Welcome to Digiklass! We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes what data we collect, how we use it, and how we protect it.

2. Information We Collect

2.1 Authentication Data

When you sign in with Google or Microsoft, we collect:

• Account ID (Google or Microsoft)
• Email address
• Name
• Profile picture URL
• Account creation and last login timestamps

2.2 Educational Data

To provide our services, we store:

• Class names
• Student names (entered by teachers)
• Poll and voting responses
• Game and quiz results
• Event registrations

2.3 File Collection (Koguja)

When using the file collection feature with Google Drive or Microsoft OneDrive integration, we store:

• Encrypted cloud service credentials (Google Drive or OneDrive)
• Collection session data (title, description, folder ID)
• File metadata (name, size, type)
• Submitter name (if requested)

2.4 Technical Data

We automatically collect:

• Session cookies (for authentication, 30-day validity)
• Browser and device information
• IP address
• Usage statistics (Google Analytics)

2.5 Browser Storage

We store in your device:

• Application card order preferences
• Newsletter subscription status

3. How We Use Your Data

• Service provision: delivering educational tools and features
• Authentication: user identification and account management
• Personalization: remembering your preferences
• Communications: sending important updates and newsletters
• Analytics: collecting usage statistics to improve our service
• Security: detecting and preventing misuse

4. Data Security

We implement the following security measures:

• Secure database storage
• Encryption of cloud service credentials (AES-256-CBC)
• Secure cookies (HttpOnly, Secure flags)
• HTTPS connection for data transmission
• Regular security updates

While we follow best practices, no system can guarantee 100% security.

5. Third-Party Services

5.1 Google Services

• Google OAuth: for authentication (Google Privacy Policy)
• Google Drive: for file storage
• Google Analytics: for usage statistics

5.2 Microsoft Services

• Microsoft Azure AD / Entra ID: for authentication (Microsoft Privacy Statement)
• Microsoft OneDrive: for file storage

5.3 Content Delivery Networks (CDN)

• jsDelivr, cdnjs (library loading)
• Google Fonts (typography)

5.4 YouTube

Some features may include embedded YouTube videos.

6. Data Sharing

We do not sell or rent your data. We only share data:

• With your consent
• With service providers: who help operate the application (e.g., Google)
• For legal reasons: when required by court or authorities
• To protect rights: our or users' rights, safety, and security

7. Your Rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

• Access: obtain a copy of your personal data
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data
• Restrict processing: limit certain data processing
• Data portability: receive data in machine-readable format
• Object: prohibit data processing for certain purposes
• Withdraw consent: at any time

To exercise your rights, please contact us.

8. Data Retention

• User account: retained while the account is active
• Session data: deleted after 30 days of inactivity
• Collection sessions: until user deletes or they expire
• Analytics data: according to Google Analytics policies

You may request deletion of your account and data at any time.

9. Children's Privacy

Digiklass is designed for teachers and students. We do not knowingly collect data from children under 13 without parental consent. Teachers may enter student names for class management — teachers are responsible for obtaining necessary consent.

If you believe your child has submitted data to us, please contact us immediately.

10. Cookies

• Session cookies: for authentication (30-day validity)
• Local storage: for storing preferences
• Google Analytics: for statistics (can be disabled in browser settings)

You can manage cookies through your browser settings, but this may affect application functionality.

11. International Data Transfers

Data may be processed outside Estonia (e.g., on Google servers). We ensure that data transfers comply with GDPR requirements.

12. Changes

We may update this policy from time to time. We will notify you of changes by:

• Updating this page and the date
• Sending email for significant changes

13. Contact

14. Governing Law

This Privacy Policy is governed by Estonian law and the EU General Data Protection Regulation (GDPR).