Privacy policy

Who is responsible

Operator details to be added.

Using the app without an account

You can use every part of the app without an account. Your progress is then saved only in your browser's local storage on your device. It is never sent to us.

We do not use analytics, advertising or tracking cookies.

What we store when you create an account

Your full name, your email address and your password. The password is stored only as a salted scrypt hash; nobody can read it.

If you sign in with Google: your Google account ID, name and email address as Google provides them.

Your learning progress (review cards, quiz and exercise results, streak days, settings), so it can be synced between your devices.

We keep short-lived counters of sign-in and sign-up attempts per email and IP address to protect accounts against password guessing. They expire after at most one hour.

Why (legal basis)

We process this data to provide the account and sync service you asked for (Art. 6(1)(b) GDPR) and to keep the service secure (Art. 6(1)(f) GDPR).

Cookies

When you sign in, we set one cookie that keeps you signed in, plus security cookies used during sign-in. They are strictly necessary for the account and are not used for tracking.

Service providers

Hosting: Vercel Inc. Database: Neon (via Vercel). Password-reset emails: Resend. Optional sign-in: Google. These providers may process data outside the EU, including in the USA, under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

Until you delete your account. Password-reset links expire after one hour.

Your rights

You can delete your account and all its data at any time on the account page. You also have the right to access, correct, restrict or export your data, to object, and to complain to a data protection authority. To use these rights, contact us at the address above.