Privacy Policy

Lexilogio is a free, non-commercial language learning site. This page explains what data it stores and why, in plain language. The short version: only what is needed to run the service — no ads, no tracking, no selling of data.

Who is responsible

Christoph Schilling, Gorderlweg 47B, 3037 AD Rotterdam, Netherlands — info@lexilogio.org (see the Impressum).

What is stored, and why

• Account data — your email address, an optional display name, and a hashed password (or your Google account ID if you sign in with Google). Needed to provide your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Study data — your flashcards, decks, and quiz progress. This is the service itself.
• Community submissions — cards you choose to share are stored with your account and shown to other users after review.
• Technical logs — the web server keeps standard access logs (IP address, requested page, time) for security and debugging, deleted on rotation.

Guest visitors can use the trainers without an account; no personal data is stored for them.

Cookies

Lexilogio uses only an essential session cookie to keep you signed in. There are no analytics, advertising, or tracking cookies — which is why there is no cookie banner.

Where data lives, and who processes it

• Hosting: a server operated by OVH in Frankfurt, Germany (EU).
• Email: verification and password-reset emails are sent via Resend (Resend, Inc., USA) — they process your email address for delivery only.
• Google sign-in (optional): if you use it, Google shares your email, name, and account ID with Lexilogio. Governed by Google's own privacy policy.
• CAPTCHA: the login and signup pages use Cloudflare Turnstile to block bots; Cloudflare may process technical browser data for that purpose.
• Error monitoring: if the server hits an error, a technical crash report (stack trace, requested page — no account data, no IP address) is sent to Sentry (Functional Software, Inc., USA) so the problem can be fixed.

No data is sold or shared with anyone else.

How long data is kept

Until you delete your account. Deleting your account (Profile → Delete my account) immediately and permanently removes your account, cards, submissions, and progress. Encrypted backups rotate out within a few weeks.

Your rights

Under the GDPR you can ask for access to, correction of, export of, or deletion of your data at any time — email info@lexilogio.org. Deletion is also available self-service in your profile. You may lodge a complaint with your data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.