Privacy
The SecAppDev Academy is built to respect your privacy. It sets no cookies, has no accounts, and does not follow you across sites. This page explains what personal data is still processed, why, and by whom.
Who we are
The Academy is run by secappdev.org VZW, a Belgian non-profit, registered at Schoolbergenstraat 133 box B, 3010 Leuven, Belgium, with enterprise number 0880.118.018. We are the controller of the personal data described here. For any question or request about your data, email academy@secappdev.org.
Visiting the site
The site is hosted by Deploybase (TwanIT, the Netherlands) and delivered through the CDN of Bunny.net (BUNNYWAY d.o.o., Slovenia), from servers in the European Economic Area. To deliver the pages, these servers see your IP address, browser (user agent), the page you request, and the page you came from (referrer). This information is kept in access logs for at most 7 days, to deliver the site and keep it secure. The legal basis is our legitimate interest in running a reliable and secure site.
The site sets no cookies. Fonts and images are served from the site itself. The only thing the site stores on your device is your choice to load external content (see below), in your browser’s local storage. It stays on your device, is never sent to us, and you can remove it by clearing the site data in your browser.
Statistics
To learn which talks are useful, we count visits in two ways, both without cookies. The legal basis is our legitimate interest in improving the Academy.
From the access logs, Deploybase counts page views as daily totals: views per page, referring sites, countries, and missing pages. These totals contain no IP addresses, identifiers, or user agents, and are kept for at most 25 months.
We also use Fathom Analytics (Conva Ventures Inc., Canada). Its script sends the page you view, the page you came from, and your IP address and browser information. Fathom routes every visit through its servers in the European Union, wherever you are, and removes the IP address there (its Extreme EU Isolation). To count unique visitors, Fathom stores a hash of the IP address and browser information with a salt that changes every day, so visits cannot be linked from one day to the next. Fathom does not store the IP address itself. The anonymized statistics are stored in the United States, with the safeguards the GDPR requires for such transfers.
Videos
Our videos are hosted by Ignite (Ignite Video GmbH, Germany) and play from videos.secappdev.org. Ignite processes the data needed to stream the video within the European Union. It does not store IP addresses and sets no cookies.
Handouts
The handouts of the lectures are files on handouts.secappdev.org, hosted by Netlify (Netlify, Inc., United States). When you open one, Netlify sees your IP address and browser, as any web host does, and may process them outside the European Union, with the safeguards the GDPR requires for such transfers.
External content
Some talks are hosted elsewhere, for example on YouTube. Such external content only loads after you agree to it. Until then, nothing is sent to that platform. If you agree, the site remembers that choice in your browser’s local storage, so it does not ask again. Once you load it, the privacy policy of that platform applies, and we have no control over what it collects. The same goes for links to other sites.
The newsletter
When you click Subscribe, the sign-up form of Flexmail (Flexmail nv, Genk, Belgium) loads. Only then does your browser connect to Flexmail and to the CDNs the form uses (code.jquery.com and cdnjs.cloudflare.com). These see your IP address, and some of them may process it outside the European Union.
If you subscribe, Flexmail stores your email address, and your first and last name if you give them, on our behalf. We use them only to send you the newsletter, based on your consent, which you confirm through an email from Flexmail. Every newsletter has a link to unsubscribe. When you unsubscribe, we no longer use your data for the newsletter. We do not track which links you click.
Emailing us
When you email us, we use your email address and message only to reply, and keep them only as long as needed for that.
Your rights
You have the right to access, correct, and delete your personal data, to restrict or object to its processing, and to data portability. Where processing is based on your consent, you can withdraw it at any time. To exercise these rights, email academy@secappdev.org.
In practice, the only personal data we can link to you is your newsletter subscription and the emails you send us. We can show, correct, or delete those on request. The access logs are deleted automatically after at most 7 days, and the statistics contain nothing that identifies you. We cannot find you in them, so there is nothing we can show or delete there (Article 11 GDPR). If you believe we do not handle your data correctly, you can file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).
Changes to this policy
We update this page when the site changes. The version on this page applies.
Last updated: November 9, 2026.