Privacy & Cookie Policy — MissC Academy

Effective: 1 June 2026

1. Who We Are

MissC Academy operates the website misscacademy.eu and related services, currently trading as [legal entity name to be inserted], registered at [registered address to be inserted], company/business registration number [registration number to be inserted]. This Privacy Policy explains what personal data we collect, how we use it, and your rights. We are committed to compliance with the EU General Data Protection Regulation (GDPR) and Vietnam's Law on Cybersecurity (No. 24/2018/QH14) and Decree 13/2023/ND-CP on personal data protection.

2. Data We Collect

We collect the following personal data:

Name, email address, and phone number — when you create an account, sign up for the free E-book, the Vocabulary Box, or subscribe to MissC AI.
Payment information — when you subscribe or top up credits, payment is processed entirely by Stripe; we never see or store your card details ourselves. See §4 below.
Profile photo — if you choose to upload one to your account.
Usage data — pages visited, time on site, browser type, and IP address, collected automatically if analytics tooling is enabled. See §8, Cookies for what's active today.

We do not collect health information or government ID numbers. We do not store full payment card details ourselves — Stripe handles that as an independent data controller under its own privacy policy.

3. How We Use Your Data

We use your data to:

Provide your account, process payments, and deliver the features you've signed up for (MissC AI, video courses, the E-book, the Vocabulary Box).
Send you the weekly Vocabulary Box over WhatsApp, if you've subscribed.
Send receipts and account-related emails.
Improve our website content and user experience through analytics, where enabled.
Comply with legal obligations.

We rely on your consent as the legal basis for email marketing communications. You may withdraw consent at any time.

4. Data Sharing

We do not sell your personal data. We share data only with the service providers that are strictly necessary to run MissC Academy, each acting under its own privacy policy and (where applicable) a data processing agreement with us:

Stripe — processes payments and subscriptions on our behalf. Stripe receives your email and payment details directly; we only receive confirmation of payment and your email address.
Anthropic — powers the MissC AI coach. Messages you send to MissC AI are processed by Anthropic's API to generate replies.
ElevenLabs — converts MissC AI's replies to spoken audio, where voice mode is used.
Netlify — hosts our website, backend functions, and data storage.

We do not transfer your data outside the EU/EEA without appropriate safeguards, or outside Vietnam without compliance with applicable Vietnamese data protection requirements.

5. Data Retention

We retain your email and name for as long as you remain subscribed to our communications. If you unsubscribe, we delete your data within 30 days unless we are required by law to retain it longer.

6. Your Rights (EU / GDPR)

If you are located in the EU/EEA, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request erasure of your data ("right to be forgotten") — use the "I want my data deleted" option on our Contact page to submit a deletion request directly.
Object to or restrict processing.
Data portability.
Lodge a complaint with your national data protection authority.

7. Your Rights (Vietnam)

If you are located in Vietnam, you have the right to know what personal data we collect, to consent to its processing, to request correction or deletion, and to file a complaint with the Ministry of Public Security's Department of Cybersecurity and High-Tech Crime Prevention. You can request deletion using the "I want my data deleted" option on our Contact page. By providing your data you consent to its processing as described in this policy.

8. Cookies

Cookies are small text files placed on your device when you visit a website. They help the site remember your preferences, understand how you use the site, and improve your experience. Some cookies are strictly necessary for the site to work; others are optional and require your consent.

8.1 What We Actually Use

Strictly speaking, this site does not set browser cookies at all today. What it does store, in your browser's localStorage and sessionStorage (not cookies, but covered here for clarity since they serve the same purpose), is:

Strictly necessary storage — your login session (so you stay signed in), your cookie-consent choice, and gameplay/progress state for the Vocabulary Box game and Word Streak. These cannot be disabled without breaking the site.
Analytics (non-essential) — a lightweight, first-party pageview counter (which pages are visited and how often). It records only the page path and a daily aggregate count — no visitor ID, no IP address, and no cross-site tracking. It only runs for visitors who accept non-essential cookies below, and stops immediately if you decline or later withdraw consent.

We do not use advertising or tracking cookies, and we do not share any data with advertisers.

8.2 How We Obtain Your Consent

When you first visit our website, a banner appears at the bottom of the screen. You can choose to:

Accept all — enables the anonymous pageview analytics described above, in addition to strictly necessary storage.
Decline non-essential — only strictly necessary storage is used; no analytics activity is sent.

Your choice is saved in your browser's localStorage and respected on subsequent visits.

8.3 How to Manage Cookies

You can control and delete cookies through your browser settings. The links below explain how to do this in the most common browsers:

Please note that disabling certain cookies may affect the functionality of our website.

8.4 Third-Party Cookies

Our website contains links to external platforms (TikTok, YouTube, Instagram, Facebook). If you click these links, those platforms may set their own cookies. We have no control over third-party cookies and recommend reviewing the cookie policies of any external site you visit.

8.5 Legal Basis for Cookies

We rely on your consent (Article 6(1)(a) GDPR) as the legal basis for non-essential cookies. Strictly necessary storage is placed on the basis of our legitimate interest in providing a functioning website (Article 6(1)(f) GDPR). For users in Vietnam, your consent to this policy is obtained in accordance with Vietnam's Law on Cybersecurity (No. 24/2018/QH14) and Decree 13/2023/ND-CP on Personal Data Protection.

9. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. We will post the new version on this page with an updated effective date. Material changes will be communicated by email where possible.

11. Contact

To exercise your rights or ask any privacy-related questions, email us at contact@misscacademy.eu or use our Contact form. This inbox is also our designated contact point for data protection questions.