Privacy Policy

Last updated: June 2, 2026

This Privacy Policy describes how ARCANUM WONDERS SRL ("we", "us", or "our") collects, uses, and protects your personal data when you use the Keyworx news aggregator service (the "Service"). We are committed to protecting your privacy in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian data-protection law.

1. Data Controller

The data controller is:
ARCANUM WONDERS SRL
CUI: 45265253
EUID: ROONRC.J31/703/2021
Romania
Contact: Contact form

2. Data We Collect

  • Account data — name and email address obtained via Google OAuth when you sign in.
  • Personalisation data — topic groups, keyword preferences, and reading notes you create within the Service.
  • Usage data — pages visited, session timestamps, and feature interactions, collected for analytics and service improvement.
  • Technical data — IP address, browser type, and device information transmitted automatically by your browser.

We do not collect payment information or special categories of personal data as defined by GDPR Art. 9.

3. Legal Basis for Processing

  • Contract performance (Art. 6(1)(b)) — to provide and maintain your account and personalisation features.
  • Legitimate interests (Art. 6(1)(f)) — to detect abuse, improve the Service, and ensure security.
  • Consent (Art. 6(1)(a)) — for optional analytics where required by law. You may withdraw consent at any time.

4. How We Use Your Data

  • Authenticate and maintain your account.
  • Personalise news feeds and topic recommendations.
  • Analyse aggregate usage to improve the Service.
  • Detect and prevent fraudulent or abusive activity.
  • Comply with legal obligations.

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Google LLC — for authentication via OAuth 2.0 (Google's privacy policy applies).
  • Hosting and infrastructure providers — under data processing agreements, located within the EU/EEA or covered by appropriate safeguards.
  • Legal authorities — where required by applicable law or court order.

6. Data Retention

Account and personalisation data is retained for as long as your account is active. If you delete your account, your personal data is erased within 30 days, except where retention is required by law. Anonymised aggregate analytics data may be retained indefinitely.

7. Your Rights

Under GDPR you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — limit how we process your data.
  • Portability — receive your data in a machine-readable format.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint — with the Romanian data-protection authority (ANSPDCP, www.dataprotection.ro).

To exercise any of these rights, use the contact form. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies to maintain your authenticated session. No third-party advertising cookies are set. If we introduce optional analytics cookies in the future, we will request your consent first.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to authorised personnel only.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after a change constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries, please use our contact form.