Privacy Policy

1. Data Controller

VokabelMeister is operated by Lutz127, based in Spain (“we”, “us”). For any privacy-related questions, please contact: lutzdg2@gmail.com.

2. Information We Collect

We collect only the data necessary to operate the app. This includes:

• Account information: username, password hash (securely hashed with Werkzeug).
• Profile information: bio, country, avatar, creation date, last active date.
• Learning data: level, XP, next level XP, streaks, best scores, best times, category progress.
• Failed words: specific words you missed, number of failures, gender, plural, and English meaning.
• User settings: sound, theme, custom color, strict articles, plurals, example sentences, speedrun mode.
• Leaderboard data: displayed publicly (username, XP, level, best times, country).
• Technical data: IP address, device type, and server logs collected automatically by Render (our hosting provider).
• Local Storage: progress caching (userProgress) and UI preferences.

3. How We Use Your Information

Your data is used to:

• Provide and improve the functionality of quizzes, categories, leaderboards, XP, and streaks.
• Save your progress, scores, and learning history.
• Display rankings, speedrun results, and public profiles.
• Store your personalized settings to customize your experience.
• Detect bugs, prevent abuse, and maintain server stability.

4. Legal Basis (GDPR)

If you reside in the EU/EEA, we process your data according to GDPR under:

• Contractual necessity: providing the VokabelMeister service to you.
• Legitimate interest: app security, rankings, improvements.
• Consent: when you provide optional profile data or settings.

5. Cookies & Local Storage

VokabelMeister uses a session cookie to keep you logged in. Local Storage is used to store progress caching and interface preferences. We do not use analytics, advertising cookies, or tracking cookies.

6. Data Sharing

We do not sell or share your data with third parties. Data may be shared only with:

• Render, our hosting provider, for necessary server operations.
• Authorities, only if required by law.

7. Leaderboards & Public Profiles

If you participate in rankings, your username, XP, level, best times, and country may appear publicly. Your avatar and bio are visible on your public profile. Do not use a username that contains personal information if you prefer privacy.

8. Data Retention

Your data is stored indefinitely while your account remains active. You may delete your account at any time through Account Settings. Upon deletion, all personal data, scores, failed words, and settings are permanently removed.

9. Cloudflare Web Analytics

We use Cloudflare Web Analytics to understand how visitors use our website. Cloudflare collects anonymous usage data such as page views, device type, browser information, and aggregated performance metrics. No personally identifiable information (PII) is collected, stored, or shared. Cloudflare Web Analytics does not use cookies or track users across websites.

10. Your Rights

You may request:

• Access to your data
• Correction of your data
• Deletion of your account
• Removal of your failed words or best scores

To exercise your rights, contact: lutzdg2@gmail.com.

11. Security

Passwords are hashed securely with Werkzug. Databases are restricted and protected by Render infrastructure. While we take strong measures, no system can guarantee absolute security.

12. Children

VokabelMeister is suitable for all ages, but we recommend children use usernames that do not reveal personal information. Parents may request account deletion via email.

13. Changes to This Policy

We may update this Privacy Policy as needed. The “Last updated” date will reflect the latest changes.

14. Contact

For any privacy-related concerns, contact: lutzdg2@gmail.com.