Privacy Policy

Last updated: 29 August 2026

This Privacy Policy explains what personal information Onlyoss collects, why, who we share it with, and what rights you have. It applies to https://onlyoss.com and the services available through it.

The data controller is Ahmed Mohamed Abdelkhalik, trading as Onlyoss, 30 Abdelhamid Elabady St., Bolkly, Alexandria, Egypt. For any privacy question, contact support@onlyoss.com.

1. What we collect

Information you give us

• Account details — username, name, email address, password (stored only as a cryptographic hash, never in readable form), and anything you choose to add to your profile such as a bio, avatar, or cover image.
• Content you upload — posts, videos, images, messages, comments, and stream content.
• Academy information — if you apply for an academy place, the school's name, location, the martial arts it teaches, roster size, and the contact details you give us.
• Correspondence — messages you send us through the contact form or by email.

Information we collect automatically

• Usage data — pages viewed, content accessed, subscriptions, and actions taken on the Platform.
• Technical data — IP address, browser type and version, device type, operating system, and referring pages, recorded in our server logs.
• Cookies — see section 5.

Information we do not collect

We never see or store your full card number. Card details are entered directly with our payment provider and never reach our servers. We receive only a transaction reference, the amount, and whether the payment succeeded.

2. Why we use it, and our legal basis

3. Who we share it with

We do not sell your personal information. We share it only with the service providers needed to run the Platform, and only as far as each needs:

• Our payment provider, which acts as merchant of record. It processes your payment and handles your card data under its own privacy policy.
• Our hosting provider, which operates the servers and databases the Platform runs on.
• Our content delivery and storage provider, which stores and serves uploaded images and video.
• Google reCAPTCHA, used on our registration and contact forms to block automated abuse. Google receives your IP address and interaction data for that check, subject to Google's privacy policy.
• Our email infrastructure, used to deliver service messages.
• Professional advisers and authorities, where we are legally required to disclose, or need to establish or defend legal claims.

If the business is sold or merged, your information may transfer to the acquirer, who would remain bound by this policy or give you notice of any change.

4. International transfers

We operate from Egypt and our providers operate in several countries, including in the European Union and the United States. Your information may therefore be processed outside your own country, where data protection law may differ. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses.

5. Cookies

We use cookies that are necessary for the Platform to work:

• a session cookie that keeps you logged in;
• a security token cookie that protects forms against cross-site request forgery;
• cookies set by Google reCAPTCHA to distinguish humans from bots.

You can block cookies in your browser, but the Platform will not function properly without the first two. We do not use advertising or cross-site tracking cookies.

6. How long we keep it

• Account data — while your account is open, and for a reasonable period afterwards to handle disputes.
• Subscription and billing records — as long as tax and accounting law requires, typically several years, even after account closure.
• Content — until you delete it, subject to copies retained by users who legitimately purchased access, and to backups.
• Server logs — a limited period for security and troubleshooting.
• Backups — our backups rotate on a short cycle, so deleted data may persist there briefly before being overwritten.

7. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate;
• delete your information, subject to records we must keep by law;
• object to or restrict certain processing;
• receive your information in a portable format;
• withdraw consent where processing is based on it;
• complain to your local data protection authority.

You can update most of your information directly in your account settings, and request account deletion from there. For anything else, email support@onlyoss.com. We will respond within one month.

8. Security

We protect your information with HTTPS encryption in transit, hashed passwords, encrypted storage of sensitive configuration, access controls, and regular backups. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the relevant authority where required if a breach affects your personal data.

9. Children

The Platform is for adults. It is not directed at anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal information, contact support@onlyoss.com and we will delete it.

10. Other users can see some of your information

Your username, profile details, and anything you post publicly are visible to other users, and potentially to anyone on the internet where a profile or post is public. Think of that as published rather than private. Direct messages are visible to the people in the conversation and, where necessary for moderation or legal compliance, to us.

11. Changes to this policy

We may update this policy. Where changes are material we will give reasonable notice by email or a notice on the Platform. The date at the top always shows the current version.

12. Contact

Questions, requests, or complaints about privacy: support@onlyoss.com.