Privacy Policy
Effective date: 9 October 2026
This policy explains what I&M ALEX s.r.o. does with personal information in connection with the website at blankindex.online. It is written against the Australian Privacy Principles because the course published here is written for readers in Australia.
The responsible entity is I&M ALEX s.r.o., registered office Víta Nejedlého 869/7, Žižkov, 130 00 Praha 3, Czech Republic, company registration number 08037892, reachable at info@blankindex.online. Where this policy says “we”, that company is what it means.
Personal information is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, which the Office of the Australian Information Commissioner publishes at oaic.gov.au/privacy/australian-privacy-principles.
This policy covers blankindex.online and nothing else. The affiliate link on this site leads to price-low.eu, which carries you onward to the advertiser's own site; that destination, the affiliate network that operates the link, and every Australian government site linked from the course each have their own privacy policies, which govern what happens once you leave here.
APP 1 — Open and transparent management of personal information
This page is that openness. It is published without a login, linked from the footer of every page on the site, and written to be read rather than to be survivable. We handle very little personal information, and the sections below say exactly what and why. If a future change makes this document inaccurate, the document changes.
APP 2 — Anonymity and pseudonymity
You can read every page of this site without identifying yourself. There is no account, no login and no form to complete. If you write to us, a pseudonymous email address is perfectly acceptable for general correspondence; we do not ask for a real name and do not need one. The exception is a request for access to or correction of personal information, where we may need enough detail to be satisfied that the records relate to you, since handing someone else's information over on request would be a worse outcome than asking a question.
APP 3 — Collection of solicited personal information
Two categories of information exist, and no others.
Server access logs. Our hosting provider records the ordinary technical details of each request to the site: the IP address the request came from, the date and time, the URL requested, the referring page if your browser sends one, and the user-agent string identifying the browser and operating system. These are produced automatically by the web server and we do not add anything to them.
The content of emails sent to us. If you write to info@blankindex.online, we hold your email address, any name you choose to give, the message itself and any attachment, for as long as stated under APP 11 below.
Nothing else is collected. To be specific: there are no forms and no input fields anywhere on this site; no accounts; no progress tracking, so the course checklists do not record what you have ticked; no cookies and no browser storage; no web fonts; no analytics; no advertising or conversion tags; no profiling; and no cross-site tracking. The site requests nothing from any other server, which means no third party receives a request as a result of your visit.
APP 4 — Dealing with unsolicited personal information
Sometimes an email contains more than is needed to answer it — an attachment we did not ask for, details about other people, a document sent by mistake. Where we receive personal information we did not solicit and could not have collected under APP 3, we destroy or de-identify it as soon as it is lawful and reasonable to do so, rather than filing it away because it arrived.
APP 5 — Notification of the collection of personal information
This page is the notification, and it is in place before any collection occurs. It names us, says how to reach us, lists the two categories of information, gives the purpose and retention period of each, names the kinds of recipients, and explains that the information may be stored outside Australia. The Contact page repeats the essentials beside the email address itself, so the explanation is where the decision is made.
APP 6 — Use or disclosure of personal information
Access logs are used for keeping the site running and secure: investigating faults, identifying abusive traffic, and responding to attacks on the server. Email is used to reply to you and, where relevant, to correct the course. Neither is used for anything else.
Personal information from this site is never sold, rented, traded or shared for anyone's marketing, including our own. It is disclosed outside our hosting and email providers only where the law requires it — a court order, a lawful request from an authority with power to make one — or where it is necessary to establish or defend a legal claim.
APP 7 — Direct marketing
We do not carry out direct marketing. There is no mailing list, no newsletter, no reminder about the course, and no way to subscribe to anything, because nothing on this site collects an address for that purpose. If you email us, you receive an answer and nothing further.
APP 8 — Cross-border disclosure of personal information
Two recipients exist: our hosting provider, which holds the access logs, and our email service provider, which holds correspondence. Both may store or process data outside Australia, including in locations we do not control the choice of. We cannot state a single country, because these services operate across multiple locations.
We are a company established in the Czech Republic, so correspondence with us is in any case handled within the European Union as well as wherever our providers hold it. Before sending anything sensitive by email, it is worth knowing that this is where it goes.
APP 9 — Adoption, use or disclosure of government related identifiers
This principle has no application here. We do not adopt, use or disclose any government related identifier — no tax file number, no Medicare number, no driver licence number, no equivalent from any country. We have no reason to hold one and no mechanism by which one could reach us except by your typing it into an email, which we would ask you not to do.
APP 10 — Quality of personal information
The information we hold is what you sent us and what your browser sent the server, so its accuracy is largely in your hands. Where you tell us something we hold about you is wrong, out of date or incomplete, we correct it. Access logs are not corrected, because they are a record of what a server observed rather than a statement about a person, but they can be the subject of an access request under APP 12.
APP 11 — Security of personal information
The site is served over HTTPS, so traffic between your browser and the server is encrypted in transit. There is no database behind this site and no stored submissions, because nothing on it submits anything; the pages are static files. The hosting account and the mailbox are accessible only to people working for I&M ALEX s.r.o., using individual credentials.
Retention is stated per category and applied. Access logs are kept for 30 days and then deleted in the ordinary rotation. Email is kept for 24 months after the last message in the conversation, after which it is deleted, unless a specific message is needed to establish or defend a legal claim, in which case it is kept until that matter ends.
We claim no certification against any security standard, because we hold none and saying otherwise would be a lie told in a document about honesty.
APP 12 — Access to personal information
You can ask what we hold about you. Email info@blankindex.online with “Privacy request” in the subject line. There is no charge for making a request. We reply within 30 days, and in practice much sooner, since the volume of material involved is small. We may ask for enough information to locate the records — for access logs, that generally means a rough date and the address used — and if we cannot verify the connection to you we will say so rather than guess.
If we refuse access, we give the reason in writing and explain how to complain.
APP 13 — Correction of personal information
Ask in the same way, with “Privacy request” in the subject, and say what is wrong and what it should be. Corrections are made within 30 days and we confirm when it is done. If we disagree that a correction is needed, we say why, and you can ask us to attach a statement to that effect to the record.
Affiliate links and what happens when you leave
Some links in the course go to the advertiser for Crossout through a paid affiliate link. Following one takes you off blankindex.online. From that point, the destination site and the affiliate network that operates the link may set cookies or use similar technology on their own domains to record that the visit came from here, under their own privacy policies, which we do not control and are not a party to.
We receive commission reports from the affiliate network. These are aggregate counts of clicks and completed sign-ups with amounts payable. We use them only to reconcile payments, we do not seek information that identifies readers, and we do not attempt to connect anything in them to any individual or to our own access logs.
Complaints
If you think we have mishandled your personal information, write to info@blankindex.online with “Privacy complaint” in the subject. We will answer within 30 days, setting out what we found and what we have done.
If you are not satisfied with that answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints, which explains the process and the forms.
Data breaches
If we become aware that personal information we hold may have been accessed or disclosed without authorisation, or lost, we assess the incident promptly. Where the assessment shows that serious harm to any affected person is likely, we notify those people and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme, describing the incident, what information was involved and what the person can do in response.
Children
This site is not directed at people under 16. The course assumes an adult making decisions about a household's equipment and money, and several parts of it are written for adults supervising younger players. We do not knowingly collect personal information about children, and since the site has no forms, no accounts and no tracking, there is no mechanism by which it could identify a reader of any age.
If you are in the European Union, the EEA or the United Kingdom
I&M ALEX s.r.o. is established in the Czech Republic, so the General Data Protection Regulation applies to our handling of personal data as well.
The legal basis for keeping server access logs is our legitimate interests in keeping the site available, secure and free of abuse, balanced against the limited and short-lived nature of the data. The legal basis for handling email is to respond to the enquiry you have chosen to send us, and where a message concerns a legal matter, our legitimate interest in establishing or defending a claim. There is no consent basis anywhere on this site, because there are no cookies and no tracking to consent to.
You have the rights of access, rectification, erasure, restriction of processing, data portability and objection in respect of personal data we hold about you, exercisable by emailing info@blankindex.online. You also have the right to lodge a complaint with a supervisory authority. Ours is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.
Changes to this policy
When this policy changes, the effective date at the top is updated. Where a change is material — a new category of information, a new recipient, a longer retention period — a short note saying so is displayed at the top of this page for 30 days from the change, so that a reader who saw the old version is not left to spot the difference.
Contact
I&M ALEX s.r.o., Víta Nejedlého 869/7, Žižkov, 130 00 Praha 3, Czech Republic. Company registration: 08037892. Email info@blankindex.online.
See also the Cookie Policy, which lists each storage and tracking technology we checked for and confirms that server access logs are the only one in use.