Legal

Privacy Policy

Last updated: March 31, 2026 — GDPR compliant

1. Introduction

OpenSyntax ("we", "us", or "our") is committed to protecting your personal data and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable data protection laws including the General Data Protection Regulation (GDPR — EU 2016/679) and comparable international frameworks.

2. Data We Collect

OpenSyntax collects minimal data. As an open-source, client-side learning platform:

  • Usage Analytics: Anonymous, aggregated page view data via Vercel Analytics. No personally identifiable information is collected.
  • Interactive Features: We do not track individual interactions (clicks, hovers) with our 3D assets, animated bento-box layouts, or course catalog filters. These are rendered purely on your local device.
  • Cookies: We do not set any first-party tracking cookies. Third-party services (e.g., Vercel) may set technical cookies necessary for platform operation.
  • No Account System: OpenSyntax currently has no user registration. Your lesson progress is stored locally in your browser's localStorage only.
  • Language Preference: Starting from v4.0.0, your selected UI language (English, Arabic, Tunisian, French, or German) is stored in localStorage under the key opensyntax_locale. This data never leaves your device and is not transmitted to any server.
  • PWA Installation: As of v4.3.0, the "Download the App" prompt uses standard browser APIs for Progressive Web App installation. No installation telemetry or device-specific identifiers are collected by OpenSyntax.
  • Hierarchical Progress: Your progress through the Tier 1, Tier 2, and Tier 3 modules is stored using prefixed keys in localStorage. This data is used solely to render your student dashboard and completion certificates locally.
  • AI & Local Models: Features involving AI integration and Small Language Models (SLMs) execute entirely locally on your device or via WebAssembly. No prompts or code telemetry are sent to external servers.

3. Legal Basis for Processing (GDPR)

Where GDPR applies, our legal basis for any processing of personal data is Legitimate Interests (Article 6(1)(f)) — specifically, the interest of maintaining platform security and improving service quality through aggregated, anonymous analytics. We do not process special category data.

4. Third-Party Services

OpenSyntax is hosted on Vercel. By using the platform, you are subject to Vercel's Privacy Policy. Our Instagram page is governed by Instagram's Privacy Policy. We are not responsible for data practices of third-party services.

5. Data Retention

As we do not collect personal data, there is no personal data to retain or delete. Anonymous analytics data is retained in aggregated form for up to 12 months to understand platform usage trends.

6. Your Rights (GDPR & International)

Depending on your jurisdiction, you may have the following rights:

  • Right of Access — Request confirmation of what personal data we hold about you.
  • Right to Erasure — Request deletion of your personal data ("right to be forgotten").
  • Right to Rectification — Request correction of inaccurate data.
  • Right to Object — Object to processing based on legitimate interests.
  • Right to Data Portability — Receive your data in a machine-readable format.

As we collect no personal data, exercising these rights will typically result in confirmation that no data is held. To submit a request, contact us via Instagram.

7. International Transfers

Our platform is served globally via Vercel's edge network. By using the Service, your requests may be processed in data centers outside your country of residence. Vercel maintains Standard Contractual Clauses (SCCs) for cross-border data transfers in compliance with GDPR.

8. Children's Privacy

OpenSyntax is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from minors. If you believe a minor has provided personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be announced in our Instagram page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact & Data Controller

OpenSyntax is an open-source community project. For privacy-related inquiries, please contact the project maintainers via our Instagram profile (@http.sejed.official).