Privacy policy
Last updated: 16 Sept 2026
This describes exactly what the platform stores, why it needs each piece, and what you can do about it. It is short because the platform collects little.
What you can do
Two of these you can do yourself, immediately, without asking anyone:
- Correct your name, level and daily goal on your profile page.
- Erase your entire learning record while keeping the account, under Settings.
- Delete the account and everything attached to it, also under Settings. This is immediate and cannot be undone.
For a copy of your data, or to object to how it is handled, write to the address below. Depending on where you live you may also have the right to complain to a data protection authority.
Contact
Questions about any of this, or a request about your data:
contact@deutschly.xyz
Tunis, Tunisia
Who is responsible
The operator of this site is the data controller for everything described below. Questions, requests and complaints go to the contact address at the end of this page.
What is stored
Your name and email address, because an account needs to be addressable and recoverable. Your password is never stored — only a bcrypt hash of it, which cannot be reversed back into the password.
Your learning record: which lessons you completed and your scores, the vocabulary in your review deck and when each word is next due, your XP, your daily streak and the achievements you have earned. This is the service — without it the platform cannot tell you where you stopped.
The ordinary technical records any web server keeps: your IP address, the browser you used and the time of the request. They are used to keep the service running and to rate-limit abuse, not to build a profile of you.
Who else sees it
Your email address is passed to Brevo, our email provider, when we need to send you a verification link, a password reset or a welcome message. Your data also sits on our hosting provider’s servers, as it must. Nobody else receives it. It is never sold, never rented, and never used for advertising.
How long
For as long as your account exists. Deleting your account removes your profile, your learning record, your vocabulary deck and your achievements. Server logs age out on their own within a short period.
Keeping it safe
Passwords are hashed with bcrypt. Sessions use a short-lived token in memory plus a long-lived httpOnly cookie that is rotated every time it is used, so a stolen one stops working. Everything travels over HTTPS. No system is perfect, and we will tell you if something happens that affects your data.
Younger learners
The platform is not aimed at children, and an account should not be created for one without a parent or guardian involved. If you believe a child has registered without that, contact us and the account will be removed.
Changes
If this policy changes in a way that matters, the date at the top of the page changes with it and signed-in learners are told.
This page describes how the platform actually behaves. It is not legal advice, and the operator details and governing law still need to be filled in.