Privacy Policy

Effective Date: May 22, 2026

Welcome to Drill Vault. Your privacy is important to us. This Privacy Policy explains how Drill Vault (“we,” “us,” or “our”) collects, uses, stores, shares, and protects your personal information when you create an account and use our platform.

By registering for or using Drill Vault, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Account Registration Data

• Full name
• Email address
• Password (stored in encrypted, hashed form — we never store plain-text passwords)

1.2 Profile & Usage Data

• Drill and training content you create, upload, or save
• Activity logs and session history
• Device type, browser type, and operating system
• A hashed, non-identifying version of your IP address, used to estimate approximate region
• Referring URLs and pages visited within the platform

1.3 Communications

• Emails or messages you send to our support team
• Feedback, survey responses, or feature requests you submit

2. How We Use Your Information

• To create and manage your user account
• To authenticate your identity and maintain account security
• To provide, maintain, and improve Drill Vault’s features and functionality
• To personalise your experience and display content relevant to you
• To send service-related communications (e.g., account confirmations, password resets)
• To detect, prevent, and address technical issues, security breaches, or fraud
• To comply with applicable legal obligations
• To analyse usage patterns and improve platform performance

3. Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to fulfil our agreement with you when you register for an account
• Legitimate Interests: Improving the platform, ensuring security, and fraud prevention
• Consent: Where you have explicitly consented
• Legal Obligation: Where required by applicable law

4. Data Storage & Security

4.1 Where We Store Your Data

Your data is stored on secure servers operated by our cloud hosting provider. Data may be processed or stored in countries outside your own; where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses for EEA data transfers).

4.2 Security Measures

• SSL/TLS encryption for all data transmitted between your browser and our servers
• scrypt cryptographic hashing for stored passwords, managed by our authentication provider (Firebase Authentication)
• Role-based access controls limiting internal access to personal data
• Regular security audits and vulnerability assessments
• Secure backup procedures and disaster recovery protocols

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password and to keep it confidential.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share your data with trusted third-party service providers who assist us in operating our platform, under strict confidentiality agreements, including:

• Cloud hosting providers (for server infrastructure and data storage)
• Analytics platforms (for understanding platform usage — data is anonymised or pseudonymised where possible)
• Email delivery services (to send account-related communications)
• Customer support tools (to manage support requests)

We may also disclose your information where required by law, court order, or governmental authority, or to protect the rights, property, or safety of Drill Vault, our users, or others.

6. Cookies & Tracking Technologies

Drill Vault uses cookies and similar tracking technologies to:

• Maintain your logged-in session
• Remember your preferences
• Analyse traffic and usage patterns

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the platform.

7. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated personal data
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at the details provided in Section 10. We will respond within 30 days (or as required by applicable law).

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you our services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (e.g., financial records or fraud prevention).

9. Children’s Privacy

Drill Vault is not directed to individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us immediately and we will take steps to delete such information.

10. Contact Us

Drill Vault
Email: support@pnke.net
Website: drills.pnke.net

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this document and, where the changes are material, notify you via email or a prominent notice on the platform. Your continued use of Drill Vault after changes are posted constitutes your acceptance of the updated policy.