Privacy Policy

Last updated: March 2026 · Data Controller: Ondřej Šitler, IČO 88635783, K Líšnu 586, 257 51 Bystřice, Czech Republic

1. Data We Collect

Account data: username, email address, hashed password (Argon2). We never store plaintext passwords.

Debate data: debate recordings (video/audio via Daily.co), chat messages, vote records, AI judge verdicts, floor control logs.

Technical data: IP address, browser type, session cookies (for authentication only).

2. Legal Basis (GDPR Art. 6)

Contract performance (Art. 6(1)(b)): processing necessary to provide the debate service you registered for.

Legitimate interest (Art. 6(1)(f)): platform security, abuse prevention, content moderation.

Consent (Art. 6(1)(a)): debate recording and AI analysis — you consent by joining a debate.

3. Third-Party Services

Daily.co (video infrastructure): processes video/audio streams. Their privacy policy: daily.co/legal/privacy.
Anthropic Claude (AI judging): receives debate transcripts for analysis. No personal data is shared beyond debate content.
Cloudflare (CDN/DNS): may process IP addresses for security.

4. Data Retention

Account data: retained until account deletion. Debate recordings: retained for replay purposes, deleted upon request or debate removal by admin. Chat messages: retained with their debate. Reports: retained for 2 years after resolution.

5. Your Rights (GDPR Art. 15–21)

You have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise these rights, contact admin@debatiste.cz.

6. Data Deletion

To delete your account and all associated data, contact admin@debatiste.cz. We will process deletion requests within 30 days.

7. Cookies

We use only essential session cookies for authentication. No tracking cookies, no advertising cookies, no third-party analytics.

8. Security

Passwords are hashed with Argon2 (OWASP recommended). All connections are encrypted via HTTPS/TLS. Video streams are encrypted end-to-end by Daily.co.

9. Children

The Platform is not intended for users under 16. We do not knowingly collect data from children.

10. Contact

Data Controller: Ondřej Šitler, admin@debatiste.cz
For GDPR inquiries or complaints, you may also contact the Czech Data Protection Authority (ÚOOÚ): uoou.cz