Privacy

1. Learning and accounts

The controller for data processing is Youssef Ibrahim (contact: [email protected], see legal notice). Guest progress, words, your writing and settings are stored in the browser. When you sign in, Supabase processes your email, authentication details and chosen display name. Passwords are sent to Supabase for authentication; wortwabe does not save them as a browser setting.

A signed-in account can sync a learning snapshot to Supabase. This includes reviews, answers and drafts, custom words, reading progress, points, study days and settings. Guest data is not copied into an account automatically.

2. Hosting and Google sign-in

Cloudflare hosts the website and server functions and handles connection data such as IP addresses. Google sign-in uses Google's identity service and Supabase; the sign-in token and basic account information are processed to verify identity. The Supabase project is hosted in the EU region Frankfurt (eu-central-1). Provider log retention periods are not confirmed here.

3. AI, speech and microphone

When you use an AI feature, the task instructions and relevant words or entered text are sent to Google Gemini. This may include your writing answer or a translation request. Please do not enter confidential information. The existing advanced setting can store a personal AI key for the browser session and send requests directly to Google.

Cloud speech sends the requested German text to Google's translation speech service. Ordinary word and sentence playback uses available owner recordings or a German system voice. Speech recognition and system voices may use provider services depending on the browser and operating system. The app does not record a microphone file for its own upload; the browser may transmit speech for recognition.

4. Optional usage and error data

The existing diagnostics choice is optional. Without consent, the interface does not send diagnostics events. With consent, it sends screen name, event type, language, device class, browser and app version to our own server. On errors, the interface sanitizes error reports directly in the browser before transmission: error types are restricted to an allowlist, free-text error messages are removed, and the call stack is filtered to approved asset scripts and line numbers. The server independently re-verifies this sanitization before storage or optional forwarding. User inputs, answers, and email addresses are not transmitted. Daily pseudonyms help count affected users; this does not guarantee complete anonymity.

The application does not load analytics or error SDKs in the browser. With consent, diagnostics events are processed on our own server through Cloudflare. The server code contains optional forwarding of usage data to PostHog and error reports to Sentry, which is only executed if corresponding server keys are configured. Cloudflare may inject a web analytics script at the edge, which is blocked in the browser by the site's security policy. Retention periods of the infrastructure providers are not confirmed here.

5. Security and retention

For abuse prevention, the server handles daily counters and hashes for account, session, IP address and a device indicator derived from account plus browser user-agent. Failed sign-ins have additional lockout counters. A hash is not automatically anonymous. The current application code has no general automatic deletion period for cloud learning snapshots, local backups or daily diagnostics aggregates. Providers may retain their own logs and backups; the retention periods of these infrastructure providers are not confirmed here.

6. Export, deletion and contact

In Settings → Data & backup you can export this profile's learning data as JSON and download recovery copies. This is not a complete export of all provider-held account data; audio files need a separate backup. Self-service account deletion is not implemented; account deletion is processed upon manual request by email to [email protected] (without promised timelines). You can remove browser data through your browser's site-data controls; first back up anything you wish to keep.

7. Optional email subscriptions (Beta)

On the Updates page you can optionally subscribe to notifications about new releases and system alerts. Subscriptions use double opt-in with a 24-hour verification link. You can unsubscribe at any time using the one-click link in every email. No tracking pixels or advertising networks are used.