Privacy Policy
Effective date: 9 October 2026
This policy explains what happens to personal information in connection with the website at validlayer.online, which publishes the beginner's course known as Valid Layer. The entity responsible for that information is Meljaro s. r. o., Vinohradská 3216/165, Strašnice, 100 00 Praha 10, Czech Republic, company registration 07137010, contactable at info@validlayer.online.
Meljaro s. r. o. handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, which are published by the Office of the Australian Information Commissioner at oaic.gov.au/privacy/australian-privacy-principles. Because this site is a reading-only publication, most of the thirteen principles have very little to bite on here, and the walkthrough below says so plainly where that is the case rather than padding the section out.
This policy covers validlayer.online and nothing else. The affiliate link published on this site leads to https://price-low.eu/a/73PqKhW7nLTR1Yj, and the other sites linked from the course are operated by other organisations. Each of those has its own privacy policy, which governs what happens once you leave this domain.
APP 1 — Open and transparent management of personal information
This document is the whole of our practice, written to be read rather than filed. The responsible entity is named above with its address, registration number and email address. There is no separate internal policy that contradicts this one, and no personal information is handled in any way this page does not describe. Questions about it go to info@validlayer.online and are answered.
APP 2 — Anonymity and pseudonymity
Reading this site requires no identification of any kind. There is no account, no sign-in and no field that asks who you are. If you write to us, a pseudonymous email address is perfectly acceptable and we will reply to it. The one exception is a request for access to, or correction of, personal information: to act on such a request we must be reasonably satisfied it comes from the person concerned, which usually means replying from the address the information relates to.
APP 3 — Collection of solicited personal information
Two categories of information exist, and there is no third.
Server access logs. Our hosting provider records, for each request made to the site, the IP address the request came from, the date and time, the URL requested, the referring page where your browser sends one, and the user-agent string your browser identifies itself with. This is the ordinary logging every web server performs and we have not added to it.
The content of emails. If you write to info@validlayer.online, we hold your email address, any name you choose to give, the content of your message and any attachment you send.
Nothing else is collected. There is no form, no newsletter, no sign-up, no account, no progress tracking across the course, no quiz and no chat. There are no cookies, no web fonts, no analytics, no advertising tags, no profiling and no cross-site tracking. The pages request nothing from any other server: every file the site loads comes from validlayer.online itself.
APP 4 — Dealing with unsolicited personal information
Occasionally an email contains personal information we did not ask for and do not need in order to reply — details about a third party, or an attachment sent in error. Where it is lawful and reasonable to do so, we delete that information. Where it is not, it is held under this policy and treated like any other email content.
APP 5 — Notification of the collection of personal information
This page is that notification, and it is linked from the footer of every page on the site. The purposes are set out under APP 6, the retention periods under the heading "How long information is kept", and the recipients under APP 8. Nothing is collected for a purpose this page does not name.
APP 6 — Use or disclosure of personal information
Access logs are used for three things only: keeping the site secure, preventing and investigating abuse, and diagnosing faults when something breaks.
Email content is used for one thing only: replying to you and dealing with whatever you raised.
Personal information held by Meljaro s. r. o. in connection with this site is never sold, rented, traded or shared for anyone's marketing purposes. It is disclosed outside the company only to the service providers named under APP 8, who process it on our behalf, and to a public authority where the law requires us to disclose it.
APP 7 — Direct marketing
We do none. There is no mailing list, no newsletter and no promotional email of any kind. If you write to us, you receive a reply to your message and nothing further. The course sends no reminders, because it does not know who is reading it.
APP 8 — Cross-border disclosure of personal information
Two recipients exist, and no others.
Our hosting provider holds the server access logs described under APP 3. Our email service provider holds the mailbox and therefore the messages sent to it. Both act on our instructions in order to operate the site and the mailbox.
These providers may store or process data outside Australia, including at locations we do not individually control. The publisher itself is established in the Czech Republic, so information held by us is held within the European Union. Before you write to us, please take into account that your message will be stored outside Australia.
APP 9 — Adoption, use or disclosure of government related identifiers
No government related identifier is adopted, used or disclosed by this site. We neither collect nor have any use for one.
APP 10 — Quality of personal information
The only personal information we hold that could be wrong is something you told us in an email. If anything we hold about you is inaccurate, out of date or incomplete, write to us and we will correct it. We do not enrich, append to or verify personal information against any other source.
APP 11 — Security of personal information
The site is served over HTTPS, so what passes between your browser and the server is encrypted in transit. There is no database behind the site and no submitted content stored anywhere, because nothing on the site can be submitted. The hosting account and the mailbox are accessible only to people working for Meljaro s. r. o., and access is removed when it is no longer needed.
We hold no certification and claim compliance with no standard beyond what this page states. Where information is no longer needed for the purposes described here, it is deleted in line with the retention periods below.
APP 12 — Access to personal information
You may ask what personal information we hold about you. Email info@validlayer.online with Privacy request in the subject line. There is no charge for making a request. We reply within 30 days of receiving it. If we cannot give access — which would be unusual here, given how little there is — we explain why in writing.
APP 13 — Correction of personal information
You may ask us to correct personal information we hold about you, by the same route and in the same subject line. There is no charge, and we reply within 30 days. If we decide not to make a correction, we say so and explain the reason, and you may ask us to attach a statement noting that you consider the information inaccurate.
How long information is kept
Server access logs are kept for 30 days and then deleted.
Emails to info@validlayer.online are kept for 24 months after the last message in the conversation, and then deleted — unless the correspondence is needed in connection with a legal claim, in which case it is kept until that matter is finished.
Affiliate links
The course publishes a paid affiliate link to one product it names. Clicking it takes you off validlayer.online entirely. From that moment, the vendor, Crossout, and the affiliate network that operates the link may set cookies or use similar technology on their own sites to record that the visit came from us. That happens on their domains, under their own privacy policies, and we neither control it nor receive what they collect.
What we receive is a commission report from the affiliate network: aggregate counts of referred registrations and the amounts payable. We use those reports only to reconcile payments, and we do not ask for, and do not want, information identifying individual readers. The full commercial arrangement is described on our Affiliate Disclosure page.
Complaints
If you believe your privacy has been mishandled by us, write to info@validlayer.online and we will investigate and respond within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner. Its complaints process is explained at oaic.gov.au/privacy/privacy-complaints.
Data breaches
If we suspect that information held in connection with this site has been accessed or disclosed without authorisation, or lost, we assess the matter promptly. Where serious harm to anyone is likely, we notify the people affected and the Office of the Australian Information Commissioner, in line with the Notifiable Data Breaches scheme.
Readers under 16
This course is written for adults and is not directed at people under 16. We do not knowingly collect information that would identify a child, and because the site has no forms, accounts or tracking of any kind, there is nothing a young reader could submit here in the first place.
Readers in the European Union and the United Kingdom
Because Meljaro s. r. o. is established in the Czech Republic, European data protection law applies to its handling of personal data alongside the Australian framework described above.
The legal basis for keeping server access logs is our legitimate interest in operating a secure and functioning website. The legal basis for handling email is the need to respond to the enquiry you have chosen to send us. There is no consent basis anywhere on this site, because there are no cookies and nothing to consent to.
Where that law applies to you, you have the right to request access to your personal data, to have inaccurate data rectified, to have data erased, to have processing restricted, to receive data in a portable form, and to object to processing based on legitimate interests. Requests go to info@validlayer.online.
You may also lodge a complaint with the supervisory authority for the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), at uoou.gov.cz.
Changes to this policy
When this policy is revised, the effective date at the top is updated. Where a change is material, a short note describing it appears at the top of this page for 30 days so that returning readers can see what changed without comparing versions.
Contact
Meljaro s. r. o.
Vinohradská 3216/165, Strašnice, 100 00 Praha 10, Czech Republic
Company registration: 07137010
info@validlayer.online