Privacy, in plain language.

Last updated 10 November 2026.

Learning without an account

Anonymous progress is stored in this browser’s IndexedDB database. It includes exercise history, mastery, saved vocabulary, story position, preferences and any writing you save. Clearing browser data removes that local copy. Export a backup in Settings whenever you need one.

When you create an account

When accounts are enabled, Germanisch stores your name, email, verification status, creation date and securely hashed password in Cloudflare D1. Better Auth manages authentication and HttpOnly session cookies. We do not store login tokens in localStorage. Verification and reset emails are delivered through Resend; those emails contain expiring account links. Email open and click tracking are disabled.

Saving learning to your account

Existing anonymous progress is not uploaded until you choose to save or merge it. Signed-in progress is then cached locally and synchronized to D1, including your saved writing. Device caches are separated by account. Signing out disconnects access to that account in the app; a retained cache remains on the device for later sign-in. On a shared device, use the remove-device-copy control before handing it to another person.

Traffic and optional learning analytics

Cloudflare Web Analytics is used for aggregate public-site traffic and performance when enabled. It is separate from our first-party product events. Optional first-party analytics records meaningful steps such as signup views, completed workouts, chapters and saved words. It uses a random browser identifier, a session identifier after 30 minutes of inactivity, and coarse first-touch campaign/referrer labels. It does not collect your answers, private writing, name, email, passwords or authentication tokens as event properties. After sign-in, a consenting browser journey may be associated with your account.

Declining optional analytics does not limit learning or accounts. Essential account lifecycle and security records are kept separately to operate accounts and prevent abuse. Turnstile checks sensitive requests on the server; it receives technical browser and network information for bot protection.

Storage and retention

Authentication cookies expire after up to seven days and refresh during active use. IndexedDB caches and preferences remain until removed. Optional identifiers and queued events are stored only after opting in; turning analytics off removes them from this browser. Raw product events and security records are retained for at most 90 days. Anonymous detailed activity is also bounded to 90 days. Aggregated counts contain no account identifiers and may be retained longer. Account learning data remains until you delete it or the account.

Your controls

Settings exports local learning backups. Account settings exports cloud account and learning data without password hashes or security tokens. Account deletion removes the cloud profile, progress, account-associated events and this device’s account cache. Separate anonymous practice remains on the device. Unidentifiable daily aggregate counts remain. Cloudflare recovery copies may persist for the provider’s recovery window and are not used for ordinary app access.

Infrastructure

Cloudflare serves the site, protects requests and hosts the Germanisch-specific database. Resend processes transactional emails in its configured Ireland region and through its delivery infrastructure. No advertising pixels, browser fingerprinting or cross-site advertising IDs are used. Infrastructure providers may process operational connection logs under their own retention policies.

Questions

Use your account’s data and deletion controls for direct management. Authentication email addresses are used for account operation, not added to a marketing list.