EnglishPolskiDeutschEspañolFrançaisItalianoPortuguêsУкраїнська
New case Sign up

Privacy Policy

This is a translation provided for convenience. If it differs from the Polish version, the Polish version applies. Polski

Version of 2026-11-14.

1. Controller

The controller of your personal data is [NAZWA OPERATORA], [ADRES OPERATORA] (“we”). Contact in privacy matters: kontakt@verdiktum.com.

2. What data we process

  • Account data: username, e-mail address, password (stored only as a hash), language, optional profile description, consent records and their dates.
  • Content you publish: cases, evidence, comments, ratings, reports and appeals. Your username is shown publicly next to your content.
  • Activity data: points, level, badges, the days on which you were active, cases you follow, notifications.
  • Technical data: IP address and browser data in server logs, kept for security; session identifier.
  • Reports from people without an account: the e-mail address given in the report.

We do not ask for and do not want special categories of data. Please do not publish such data about yourself or others.

3. Why and on what legal basis

  • Providing the Service and your account (Article 6(1)(b) GDPR): registration, signing in, publishing your content, notifications inside the Service.
  • Security, preventing abuse, moderation and defending claims (Article 6(1)(f) GDPR, our legitimate interest): logs, rate limits, the audit log, handling reports.
  • Legal obligations (Article 6(1)(c) GDPR): in particular obligations under the Digital Services Act, such as handling notices and complaints.
  • E-mail notifications about your cases (Article 6(1)(f) GDPR): you can switch them off in the settings.
  • Product news by e-mail (Article 6(1)(a) GDPR): only with your consent, which you can withdraw at any time.

4. Who receives the data

  • Hosting provider: [HOSTING PROVIDER, COUNTRY].
  • E-mail delivery provider: [E-MAIL PROVIDER, COUNTRY].
  • Provider of the AI model, when the assistant is enabled: [AI PROVIDER]. We send only the public content of a case (its title, description and evidence) to produce a summary or an answer. We do not send account data such as your e-mail address.
  • Payment provider, if you buy a supporting membership: Paddle.com Market Limited (United Kingdom) and its affiliates. Paddle is the seller and an independent controller of payment data; we receive only the payment status, the amount, and the customer and subscription identifiers. See Paddle’s privacy policy.
  • Public authorities, when the law requires it.

If a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision or on standard contractual clauses approved by the European Commission.

5. How long we keep the data

  • Account data: until you delete your account.
  • Published content: as long as the Service operates. After your account is deleted, the content stays in an anonymous form.
  • Server logs: up to 90 days.
  • Audit log and records of moderation decisions: up to 3 years, for accountability and the defence of claims.
  • Reports from people without an account: up to 1 year after the report is closed.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent. In the settings you can download your data and delete your account yourself. You can also lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO).

7. Automated processing

The Service calculates weights of evidence, the community meter, points and levels automatically, according to the public method described in “How it works”. These calculations concern content and do not produce legal or similarly significant effects for you. Decisions on removing content or suspending accounts are made by people.

8. Cookies

We only use cookies that are necessary for the Service to work. Details: Cookies.

9. Children

The Service is intended for people who are at least 16 years old.

10. Security

Passwords are stored as hashes (argon2id), connections are encrypted, and access to data is limited to authorised persons.

11. Changes

We will announce significant changes to this policy in the Service.