Last updated 17 August 2026
This document is not finished. The name and contact address of whoever is responsible for your data are not filled in yet. Until they are, do not treat this page as a complete statement — and do not put anything here you would mind losing.
The short version. There are no analytics, no tracking cookies, no advertising, and no third-party scripts on any page here — not one. Nothing about you is sold or shared. The only cookie is the one that keeps you signed in.
Not filled in yet. See the notice above.
| Your email address | To sign you in, and to reach you about your account. Nothing else is sent to it. |
|---|---|
| Your password | Stored only as a scrypt hash with a random salt. It cannot be read back, here or by anyone who took the database. |
| What you make | Your maps, concepts, passages, notes, your own words, and any images you upload. |
| Your learning progress | Which rung each card is on, attempts, streaks. Needed to pick up where you left off. |
| Your settings | Voice, reading speed, the language you write in. |
| Your session | A random identifier in a cookie, plus a row recording when it started and when it was last used. It lasts 90 days, or until you sign out. |
| Your public profile | Only if you publish: a handle, a display name and a bio. It does not exist until you publish something. |
The legal basis is the agreement between us: without this, there is no account and nothing to show you. There is no profiling and no automated decision-making.
No page views, no analytics, no advertising identifiers, no fingerprinting. There is no access log recording who fetched what.
Your IP address is never written to disk. It is held in memory for a few minutes purely to limit repeated sign-in and sign-up attempts, and it is gone when the server restarts. It is not stored, not logged, and not linked to your account.
One, named after the session. It holds a random identifier and nothing about you. It is
HttpOnly, SameSite=Lax, and Secure over https. It is
strictly necessary to keep you signed in, which is why you are not asked for consent for it —
there is nothing else to consent to.
Icons, image search and some Bible text come from other providers. Your browser never talks to them. Those requests are made by this server, so the other side sees this server and never your IP address or your browser. That is why these pages load nothing from anywhere else.
Nothing is shared with anyone for their own purposes. Nothing is sold. There is no advertising network involved at any point.
On a server in Germany (Hetzner, EU) — so inside the EU, with no transfer to a third country.
One exception, stated plainly: before each new version is deployed, a copy of the database is made onto a personal computer in the Netherlands, so that a bad release can be undone. That copy contains everything in the table above. The last five are kept and older ones are deleted automatically. It stays within the EU.
Everything starts private. Nothing you make is visible to anyone else until you publish it yourself, and publishing tells you what will be shown before you switch it on.
noindex so search engines leave it alone. Lowering the setting revokes that link
for good.Your email address is never shown on a public page.
Under the GDPR you can ask for a copy of your data, correct it, have it deleted, object to how it is used, or take it elsewhere. Two of those do not need asking:
This service is not intended for anyone under 16, and no account should be made below that age. If you believe a child has made one, say so and it will be removed.
If this document changes in a way that matters, account holders get an email. The date at the top says when it last changed.