TinkerPanda uses personal data to review account requests, provide the learning service, protect the platform and support learners. The operator is TinkerPanda; contact the administrator through Help Center or Support.
What we collect
Signup details include your name, requested username, email address and a one-way password hash. If approved, the service also records account status, learning progress, quiz and activity results, preferences, notes, communications, support requests, virtual-machine activity, security events, IP address and browser or device information needed for operation and protection.
Why we use it
We process account and learning data to provide the service and perform our agreement with you. We process security, diagnostic and limited usage records for our legitimate interests in preventing abuse, maintaining reliability and improving TinkerPanda. Where consent is the appropriate basis, you can withdraw it without affecting earlier lawful processing.
Sharing and international processing
Data is available only to authorised administrators and service providers needed to host, secure or operate TinkerPanda. We do not sell personal data. If a provider processes data outside the UK, appropriate contractual or other lawful safeguards will be used.
Retention
Pending requests are kept while they are reviewed. After a decision, the request password hash is deleted and the remaining decision record is retained for security and audit needs. Account and learning data is kept while the account is active and for a limited period afterwards based on legal, security, backup and operational requirements.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to processing. Use Help Center or Support to make a request. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Required information
Name, username, email and password are needed to review and create an account. Without them TinkerPanda cannot process the request. There is no solely automated decision-making: an administrator accepts or denies every signup request.