RYUTRAINING

Privacy policy

Last updated: 2026-10-24

Who is responsible

trainlikeryu.com is published by Badr Zinoun, an individual based in Morocco, who is responsible for the personal data described here. Contact: contact@trainlikeryu.com. Ryu Training sells no personal data and shows no advertising.

When you ask for a free PDF

The form on the program pages collects:

  • your email address (required);
  • your first name, if you enter it (optional);
  • the program you choose;
  • the page of this site where you sent the form;
  • the UTM parameters of the address you arrived with, if there are any (utm_source, utm_medium, utm_campaign, utm_content, utm_term): they tell us which link brought you, for example a YouTube description;
  • whether you ticked the box for emails about new programs and videos, and when you ticked it;
  • the date and time of your request.

Right after you send the form, the page shows a personal download link, valid for 7 days. Each time the file is downloaded through that link, we record the date and time and the program.

What happens with your email. No email is sent to you when you ask for a PDF: the link is shown on the page. We keep your email address with your request to know who downloaded which program, to handle your requests about your data and to prevent abuse. We write to you only if you ticked the box; we don't send any newsletter yet, and if we start, each email will have a link to unsubscribe in one click. Your email address is never sold, rented or shared for anyone else's marketing.

Legal basis. Your request for the PDF (to give you the file and keep a record of it), and your consent for marketing emails, which you can withdraw at any time by writing to contact@trainlikeryu.com.

Limiting abuse, without storing your IP address

To limit the number of form submissions from one connection, we compute each day a fingerprint (SHA-256) of your IP address, the date and a secret value, and count the submissions made with it that day. Your IP address itself is never stored, and neither is your browser's user agent. The fingerprint cannot be turned back into your IP address, changes every day, and is deleted the next day.

The form also has a hidden field that people don't see and some robots fill in: a submission with this field filled in is rejected.

Measuring visits with PostHog

We use PostHog (PostHog Cloud EU, servers in Frankfurt, Germany) to count visits and downloads. The PostHog script loads from eu-assets.i.posthog.com and is set up so that:

  • it stores nothing on your device: no cookie, no local storage. A visitor is not followed from one page to the next;
  • it does not record your session, does not capture your clicks or what you type, and shows no surveys;
  • it is never told your email address or your name.

For each page you view, and when you leave it, PostHog receives: the address of the page, the address of the site you came from, the UTM parameters, the type of device, the system and the browser, the screen size, the language of your browser, the time, and a random identifier created for that page view. Our PostHog project is set to discard IP addresses, so PostHog does not store yours; it may use the connection to estimate your country and city before discarding it.

Our server also sends PostHog two events, without your email, your name or your IP address: lead_submitted when you ask for a PDF (program, page, UTM parameters, whether you ticked the email box) and pdf_downloaded when the file is downloaded (program). They carry the random identifier of your page view when there is one, or else the random identifier of your request.

YouTube videos

Video thumbnails are served by this site. The YouTube player (youtube-nocookie.com) loads only when you click play; from then on, YouTube's own privacy policy applies to the video.

Cookies

This site sets no cookies and stores nothing in your browser.

Who processes the data, and where

  • Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, United States) hosts the site: the pages, the database of requests (Western Europe region) and the PDF files. Cloudflare processes your connection to deliver the site, including outside Morocco.
  • PostHog Inc. measures visits on its EU servers, as described above.

Nobody else receives the data.

How long we keep it

  • PDF requests and downloads: 24 months after your last request, then deleted automatically.
  • Daily rate-limit fingerprints: deleted the next day.
  • PostHog events: kept by PostHog under our project's retention settings, without your email, name or IP address.

Your rights

Under Moroccan law 09-08 and, for people in the European Union, the GDPR, you can access, correct, export or delete your data, withdraw your consent to emails and object to its use. Write to contact@trainlikeryu.com from the address you used; we answer within one month.

You can also complain to the CNDP (cndp.ma), the Moroccan data protection authority, or to the data protection authority of your country.

Security

The site is served over HTTPS only. Download links are signed and expire after 7 days. The PDF files are kept in private storage and are only served through those links.

Changes

We publish every change on this page, with its date.