We respect your privacy and collect as little data as possible. This policy explains what we collect and why, who we share it with and how to exercise your rights, under Algerian Law No. 18-07 on the protection of individuals in the processing of personal data. We apply the same rights to all users wherever they are.
1. Data controller
Your data is controlled by the legal entity operating Masar, named at the bottom of this page. For any question or request about your data: privacy@learnmasar.com.
2. Data we collect
Account: name, email, language and profile picture if you add one.
Learning: courses, progress, notes, questions and reviews, certificates and AI assistant conversations.
Payments: orders, amounts and invoices. Card details are handled directly by the payment provider; we never see them.
Security: IP address, device and browser type, device identifier and viewing logs to protect content.
Contact: what you send through the contact form or by email.
Analytics: usage events — with cookies only after your consent.
We don't collect sensitive data (health, religion, biometrics), and the platform isn't intended for people under 16.
3. Why we use it and the legal basis
Purpose | Basis |
|---|---|
Providing the service: account, course access, certificates, support | Performance of the contract |
Invoices and accounting records | Legal obligation |
Security, fraud and account-sharing prevention, content protection | Legitimate interest |
Analytics, advertising and the marketing newsletter | Your consent (withdraw any time) |
4. Who we share it with
We never sell your data. We use providers that process data on our behalf under processing agreements, choosing European regions where possible:
Provider | Purpose | Location |
|---|---|---|
Hetzner | Hosting, database and backups | Germany / Finland |
Cloudflare | Security, CDN, Turnstile, encrypted backups | Global (United States) |
Bunny.net | Video streaming and file storage | European Union |
Chargily | DZD payments | Algeria |
Polar | International payments (merchant of record, independent controller) | United States |
Resend | Email delivery | United States |
PostHog | Analytics (after consent) | European Union |
Sign-in and Google Analytics (after consent) | United States | |
Meta | Ad measurement (after consent) | United States |
Sentry | Error tracking without personal data | European Union |
Anthropic | AI assistant (no name or email sent) | United States |
We notify you 15 days before adding any new processor that handles personal data.
5. Transfers outside Algeria
Part of our infrastructure is outside Algeria (see the table above). We only use providers offering an adequate level of protection and processing agreements, and we follow the procedures required by Algeria's national personal data protection authority (ANPDP).
6. Retention
Data | Period |
|---|---|
Account, progress and certificates | While the account is active; deleted or anonymised 14 days after a deletion request |
Orders and invoices | 10 years (accounting obligation) |
AI assistant conversations | 12 months after the last message |
Viewing logs | 180 days |
Consent records | 5 years after withdrawal or account deletion |
Backups | Up to 12 months (restored only in a disaster) |
7. Your rights
Access and portability: download a copy of your data from Settings → Privacy & data.
Rectification: edit your profile any time.
Erasure: delete your account from Settings (you can undo it within 14 days).
Objection and withdrawing consent: unsubscribe from marketing emails and change your cookie choice from the “Cookie settings” link at the bottom of the page.
We answer requests within 30 days at most. You may also lodge a complaint with the ANPDP.
8. Cookies
We use cookies needed to run the platform and only enable analytics and marketing cookies with your consent. Details in our cookie policy.
9. Security
We encrypt connections, restrict data access by role, protect staff accounts with two-factor authentication and keep encrypted backups. We report breaches as the law requires.
10. Changes
We may update this policy and will email you 15 days before any material change. The last-updated date is shown at the top of this page.