Privacy Policy

BlokWiki ("we") respects the privacy of users worldwide. This policy explains what we collect, how we use it, and your rights under GDPR (EU), CCPA/CPRA (California) and similar laws.

1. Data controller

The operator of BlokWiki is the data controller of personal data collected on the Site. This policy applies to data activities across all pages the Site offers to a global audience.

2. Information we collect

Voluntarily provided: name, email and message content when you contact us. Automatically collected: IP address, browser and device type, operating system, access times, pages viewed and referring source (for security and traffic analysis). Cookies and similar technologies: to remember language preferences, maintain basic functionality and perform aggregate analysis.

3. Categories of personal information

We collect: identifiers (IP address, device identifiers); internet activity (pages viewed, access times, referring source and preferred language); and communication content you voluntarily provide. We do not collect payment information, government identification, or sensitive personal information such as biometrics or precise geolocation.

4. Purposes of use

We use collected information to: provide and improve the service; keep the site secure and prevent abuse and fraud; analyze traffic and content performance to guide editorial decisions; comply with legal obligations; and, where you have consented, for analytics and marketing.

5. Legal bases

For users in the EU/UK, we currently process data under the GDPR based on legitimate interests (security, abuse prevention, service improvement) and legal obligations; where a future activity requires consent (such as marketing or non-essential cookies), we will obtain it in advance. You may ask us to explain the legal basis of any specific processing activity.

6. Cookies and advertising

The Site uses necessary cookies (language preference, session maintenance). Advertising is primarily displayed through self-hosted banners and referral links; we do not serve behavioral ads through third-party ad networks. If we introduce third-party advertising or analytics services, we will update this policy in advance and, where required by law, obtain consent and provide opt-out choices.

7. Sharing and disclosure

To achieve the purposes above, we may share the minimum necessary data with service providers such as hosting and security vendors (data processors), and require them by contract to apply equivalent data protection measures. We disclose data only: as required by legal process or regulators; to protect the rights and safety of the Site, users or the public; and in connection with a merger, acquisition or asset sale, where data may be transferred as a business asset (with equivalent protection guaranteed).

8. International transfers

Our services and vendors may be located outside your country; transfers are made with appropriate safeguards required by applicable law (such as standard contractual clauses).

9. Retention

Data is kept only as long as needed for the purposes of collection or as required by law; server logs are rotated and generally retained for no more than 12 months. After expiry, data is deleted or anonymized.

10. Security

We apply reasonable technical and organizational measures including encrypted transmission and access controls. No internet transmission is fully secure; please avoid sending unnecessary sensitive information in communications.

11. Data breach notification

In the event of a data breach, we will promptly assess it and notify supervisory authorities within the timeframes required by applicable law; where a breach is likely to result in a high risk to individuals' rights and freedoms, we will notify affected users directly.

12. Your rights

Under GDPR/UK GDPR you may request access, correction, deletion, restriction or portability of your data, object to certain processing, withdraw consent, or lodge a complaint with a supervisory authority. We may request information to verify your identity and respond within one month (extendable by law for complex cases). You can also manage or clear cookies through your browser settings at any time.

13. California residents (CCPA/CPRA)

California residents have rights to know (categories and sources of personal information collected, as described in Sections 2 and 3), delete, correct and opt out. We do not sell or share (for cross-context behavioral advertising) your personal information, and there is no such sale involving minors under 16. Exercising these rights will not result in discriminatory treatment (including differences in price or service).

14. Children

The Site is not directed to children under 16 and we do not knowingly collect their data; such data will be deleted if identified. Parents or guardians may contact us to request deletion.

15. Do Not Track

The Site does not currently respond to browser Do Not Track (DNT) signals. If a uniform industry standard for DNT emerges, we will reassess and update this policy.

16. Changes

Updates to this policy will be published on this page with a revised date; material changes will be noted in the update notes.

17. Contact

Questions about this policy or exercising your data rights can be sent through the contact channels published on the Site.