Privacy notice · totacademy.app
How this website treats your data.
This notice covers the public pages of totacademy.app: the homepage, the plans page and the footer links. The free study tools under /interactives have their own, shorter notice, because they work differently.
Last updated:
Who we are
The controller of the personal data described in this notice is Tot Academy, a tutoring academy in Sofia, Bulgaria.
- Controller
- Tot Academy
- Address
- 48 Gen. Skobelev Boulevard, Sofia
- Phone
- +359 885 076 024
Write to us or call us with any question about your data or to use one of your rights (see "Your rights" below). We answer within one month.
What this website does and does not collect
When you only read the pages, we collect very little:
- Technical request data that our hosting provider receives whenever a page is loaded (see "Hosting and server logs").
- Your analytics choice (Accept or Decline), stored in your own browser (see "Cookies and similar storage").
- Analytics data, but only if you accepted analytics (see "Analytics").
- Your IP address goes to Google, but only if you click "Show the map" (see "Google Maps").
We do not collect:
- names, email addresses or other details through forms: the site has none;
- advertising identifiers, or any data for advertising or for building profiles;
- device fingerprints.
Hosting and server logs
The website is hosted by Vercel Inc. When your browser asks for a page, Vercel receives your IP address, the address of the page, the time, your browser and device type and the page you came from. It uses this to deliver the page and to protect the service against abuse, and keeps it in its standard server logs for a limited time.
Our server functions run in Frankfurt, Germany (region fra1). Static files such as images are served from Vercel’s content delivery network, so a page can come from a location near you. We do not use these logs to identify or follow individual visitors.
Legal basis: our legitimate interest in delivering a secure website (Article 6(1)(f) GDPR).
Analytics
We would like to understand which parts of the homepage are useful, so we use PostHog, hosted in the EU. It is switched off by default.
- Opt-in only. Nothing is loaded and nothing is recorded until you click Accept on the banner. Decline, or no choice at all, means no analytics code runs.
- What is recorded after you accept: which pages and sections you view, which buttons you click (for example the call button or the language switch), technical details such as browser and device type, and an approximate location derived from your IP address. We also use session replay: a recording of how the page is used (scrolling, clicks and pointer movements). Everything typed into input fields is masked and never recorded.
- Where the data goes: requests go through totacademy.app to PostHog’s EU cloud.
- Do Not Track and Global Privacy Control. If your browser sends either signal, we treat it as a Decline.
- Change your mind at any time with "Cookie settings" in the page footer. It forgets your choice, deletes PostHog’s identifiers from your device and shows the banner again. Declining stops analytics at once and deletes them again.
- How long: analytics data is kept for at most 12 months.
Legal basis: your consent (Article 6(1)(a) GDPR, and the rules on storing information on your device). You can withdraw it at any time without any effect on the rest of the site.
Google Maps
The homepage shows where the academy is. The map is a Google Maps embed, and it is not loaded until you click "Show the map". Before that, your browser does not contact Google at all.
Once you click, Google LLC receives your IP address and browser details and may set or read its own cookies, as described in Google’s privacy policy. We do not receive that data. Legal basis: your consent, given by clicking.
The "Get directions" link is an ordinary link to Google Maps. It sends nothing until you click it, and then you are on Google’s site.
Free study tools and the game (/interactives)
Phone enquiries
This website has no contact forms. The "Book a trial lesson" and "Call" buttons simply start a phone call to our number from your own phone. Data from a phone call (such as your number) is handled outside the website, by your telephone provider and by us, and is not covered by this notice. Ask us if you want to know what we hold.
Log-in area
The log-in area is for enrolled students and staff. Accounts, lessons, grades and balances are not covered by this notice: a separate notice applies to accounts.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- restrict how we use it;
- receive it in a portable format;
- object to processing based on our legitimate interests;
- withdraw your consent at any time. For analytics, use "Cookie settings" in the footer.
Contact us using the details above. You also have the right to complain to the supervisory authority. In Bulgaria that is the Commission for Personal Data Protection (Комисия за защита на личните данни), www.cpdp.bg. You may complain to the authority in the country where you live or work, if that is elsewhere.
International transfers
Our providers are Vercel Inc. (hosting) and PostHog (analytics, only if you accept). Data is stored in the EU where the service offers it. Where data is transferred to a provider in the United States, the transfer relies on the EU–US Data Privacy Framework, where the provider takes part, and otherwise on the European Commission’s standard contractual clauses. If you click "Show the map", your data goes to Google as described above.
How long we keep data
- Analytics data: at most 12 months.
- Your analytics choice: in your own browser until you clear it.
- Server logs: kept by our hosting provider for a limited time under its own retention rules.
- Google Maps: governed by Google’s own policy, only if you load the map.
Changes to this notice
If we change how the website handles data, we update this page and its date.