Privacy Policy
Effective date: 16 October 2026
This policy explains what happens to personal information in connection with the website at idlecipher.online. The responsible entity is K.R.N. rest s.r.o., č.ev. 609, 664 49 Ostopovice, Czech Republic, company registration 04490142, contactable at info@idlecipher.online. Where this policy says "we", it means K.R.N. rest s.r.o. and nobody else.
Personal information in connection with this site is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, which are published by the Office of the Australian Information Commissioner at oaic.gov.au/privacy/australian-privacy-principles. The policy is set out below principle by principle so that you can see what each one means here.
This policy covers idlecipher.online only. The affiliate destination at price-low.eu, the websites of the games described in the course, and the Australian government sites the course links to are not ours, are not covered by this policy, and publish their own.
APP 1 — Open and transparent management of personal information
This page is the whole of our policy and is linked from the footer of every page on the site. It is written to be read without a lawyer. Our practices are deliberately minimal: the site has no forms, no accounts, no analytics and no cookies, so there is very little to manage. Questions about the policy, and requests for it in another format, go to info@idlecipher.online.
APP 2 — Anonymity and pseudonymity
You can read every page of this course without identifying yourself. We do not ask for a name, an email address or anything else in order to let you read. If you write to us, you may use a pseudonymous email address and we will reply to it. The one exception is an access or correction request about information we hold: to answer that, we need enough information to find the records you mean, which in practice means writing from the address you used before.
APP 3 — Collection of solicited personal information
We solicit nothing. Two categories of information nevertheless exist:
- Server access logs, kept by our hosting provider as part of operating the web server. Each entry can contain the IP address making the request, the date and time, the URL requested, the referring page if your browser sends one, and the user-agent string your browser supplies.
- The content of emails you send us at info@idlecipher.online: your email address, your name if you give one, your message, and any attachment you include.
Nothing else is collected. There is no contact form, no newsletter, no sign-up, no account, no progress saving and no quiz. There are no cookies, no localStorage or sessionStorage, no web fonts, no analytics, no advertising tags, no profiling and no cross-site tracking. The pages request nothing from any other server: every style, script and graphic is served from idlecipher.online itself.
APP 4 — Dealing with unsolicited personal information
Sometimes an email contains more than is needed to answer it — a phone number, a postal address, details about other people, an attachment we did not need. Where we could not have collected that information ourselves under APP 3 and it is lawful and reasonable to do so, we destroy or de-identify it. In practice this means deleting the message or the attachment once the question has been answered.
APP 5 — Notification of the collection of personal information
This page is that notification, and the two categories above are the complete list. The purposes, the retention periods, the recipients and the complaint routes are all stated below. We do not collect personal information from any source other than you, and no third party supplies us with information about our readers.
APP 6 — Use or disclosure of personal information
Access logs are used for the security of the site, for preventing and investigating abuse, and for diagnosing faults. Email is used to reply to you, and to keep a record of a correction or a request if one was made.
We do not use either category for anything else. Personal information is never sold, rented, traded or shared for marketing, by us or by anyone on our behalf. It is disclosed to a court, regulator or law enforcement body only where the law requires or authorises it, and then only to the extent required.
APP 7 — Direct marketing
We do no direct marketing of any kind. There is no mailing list, no newsletter and no subscription. We do not send reminders about the course, because we have no way of knowing who has read it and no wish to acquire one. Writing to us does not put you on any list.
APP 8 — Cross-border disclosure of personal information
Two service providers handle information on our behalf: our hosting provider, which operates the web server and keeps its access logs, and our email service provider, which carries and stores our mailbox. Both may store or process data outside Australia, including in locations we do not individually name here. K.R.N. rest s.r.o. is itself established in the Czech Republic, so an email sent to us is read outside Australia by definition.
No other party receives personal information from this site. We do not transfer anything to advertisers, data brokers or analytics companies, because we use none.
APP 9 — Adoption, use or disclosure of government related identifiers
This principle has no application here: we do not adopt, use or disclose any government related identifier, and we never ask for one.
APP 10 — Quality of personal information
The only information we hold that could be inaccurate is something you told us in an email. If a detail is wrong, tell us and we will correct it. We do not build profiles, scores or inferences about readers, so there is nothing else to keep accurate.
APP 11 — Security of personal information
The site is served over HTTPS. It has no database, no login and no stored submissions, because it accepts none. Access to the hosting account and to the mailbox is limited to people working for K.R.N. rest s.r.o. and is protected by individual credentials. Information is destroyed or de-identified when the retention periods below expire. We do not claim any certification or compliance standard beyond what is described on this page.
APP 12 — Access to personal information
You may ask what personal information we hold about you and receive a copy of it. Email info@idlecipher.online with "Privacy request" in the subject line. There is no charge for making a request. We reply within 30 days. If we cannot give access — for example because the records you are asking about are log entries that have already been deleted, or because granting access would reveal someone else's personal information — we will tell you why in writing.
APP 13 — Correction of personal information
You may ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading, using the same address and subject line. We reply within 30 days, and if we decline we explain why and tell you that you can ask us to attach a statement of your own to the record.
Why each category is kept, and for how long
| Category | Purpose | Retention |
|---|---|---|
| Server access logs | Security, abuse prevention, fault diagnosis | 30 days, then deleted |
| Emails to info@idlecipher.online | Replying to you, and recording a correction or request | 24 months after the last message in the conversation, unless the message is needed for a legal claim |
Affiliate links
Some pages carry affiliate links, which are labelled where they appear and explained in full on the Affiliate Disclosure page. Following one takes you off idlecipher.online. From that moment you are on sites belonging to other organisations: the affiliate network that operates the link, and the game publisher it sends you to. Those organisations may set cookies or use similar technology on their own domains to record that the referral came from us, under their own privacy policies, which you can read on their sites.
What comes back to us is a commission report from the network: counts of clicks and of completed sign-ups, with the amounts payable. We use those reports only to reconcile payments. We do not ask the network for information identifying individual readers, and we have no interest in receiving any.
Complaints
If you think we have mishandled your personal information, write to info@idlecipher.online and describe the problem. We answer complaints within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints, which explains what the OAIC can look at and how to lodge a complaint.
Data breaches
If we become aware that personal information we hold has been accessed, disclosed or lost without authorisation, we promptly assess the incident and the harm that could follow. Where serious harm is likely, we notify the people affected and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme, and we say what we are doing about it.
Children
This course is written for adults and is not directed at people under 16. We do not knowingly collect personal information from children, and because the site has no forms or accounts, there is nothing on it that would collect information identifying a child.
Readers and residents of the EU, EEA and the United Kingdom
K.R.N. rest s.r.o. is established in the Czech Republic, so European data protection law also applies to our handling of personal information.
Our legal basis for keeping server access logs is our legitimate interests in operating the site securely and diagnosing faults. Our legal basis for handling the content of an email is that it is necessary to respond to the enquiry you chose to send us. We rely on no consent basis, because the site sets no cookies and uses no tracking for which consent could be required.
Subject to the conditions in that law, you have the right to request access to your personal information, its rectification or erasure, restriction of processing, portability, and to object to processing based on legitimate interests. Requests go to info@idlecipher.online. You may also lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), at uoou.gov.cz/en.
Changes to this policy
When this policy is revised, the effective date at the top is updated. If a change materially affects how personal information is handled, a note saying so is shown at the top of this page for at least 30 days from the new effective date.
Contact
K.R.N. rest s.r.o.
č.ev. 609, 664 49 Ostopovice, Czech Republic
Company registration: 04490142
Email: info@idlecipher.online
Related pages: the Cookie Policy, which lists the technologies checked and confirms that the only one in use is the server access log, and the Terms and Conditions.