Privacy Policy

Account data (email, name, optional info), quiz results and statistics. We never sell your data.

To provide the quiz service, track your progress, and — for company accounts — let your company administrator view aggregated team results.

Performance of the service you requested and of the contract, compliance with our legal obligations and, for optional uses, your consent.

Data is processed through Google Firebase (Google Cloud): Authentication and the Firestore database are provided by Google. Payments for the paid plans are processed by Stripe, which receives only the data necessary for payment and invoicing; NakamaCyber retains no card data.

Account data is kept while your account remains active. Billing records are kept for the statutory retention period for accounting documents, even after your account is closed.

When you write to us through the website form, we receive what you enter: for example your name, work email address, company, team size, the plan you are considering and your message. For a waiting list, we receive your email address and the information requested on the form.

The form also sends the address of the page you sent it from and, if you accepted audience measurement, the identifier stored in the hubspotutk cookie, which links your request to your visits.

This information is stored in HubSpot, our customer relationship management tool, in an account hosted in HubSpot’s European Union data centre (Germany).

Required fields are marked on the form: without them, we cannot handle your request. The others are optional.

• Answering your request (question, quote, subscription): steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or, for a simple question, our legitimate interest in answering the messages we receive (Article 6(1)(f)).
• Letting you know when an offer announced on the website launches, if you join its waiting list: your consent (Article 6(1)(a)), which you can withdraw at any time by writing to us.
• Measuring the website’s audience (pages viewed, where visits come from) and linking your visits to your contact request: your consent (Article 6(1)(a)), collected through the cookie banner. Details are in the Cookie Policy.
• Serving the website’s pages and protecting it against abuse: our legitimate interest (Article 6(1)(f)). To do so, the hosting provider processes your IP address and technical connection data.

• HubSpot: forms, customer relationship management, consent banner and audience measurement.
• Google, through Firebase Hosting: hosting and delivery of the pages.
• Google, through Google Analytics 4: audience measurement, only if you accept it.
• At Nakama, only the people who handle your request can access it. We never sell your data.

• Contact requests: three years after our last exchange, then deleted. If you become a customer, the application’s rules apply.
• Waiting list: until the announced offer launches, or until you withdraw your consent if that happens first, and no longer than 24 months after you sign up; then deleted.
• Trackers: their lifetimes are listed in the Cookie Policy. Your choice in the banner is remembered for six months.
• IP address and technical connection data: processed by Google while serving the pages; we do not keep them.