Privacy Policy

Who We Are

LanguaTracker operates a web application that helps you track your language learning activities, set goals, and monitor progress. We are the controller of the information described in this policy. If you have questions, contact us at support@mail.languatracker.com.

What We Collect

Account information: Email address for authentication, account creation, and important notifications. Authentication tokens and session data to keep you logged in securely.

Learning activity data: The activities you log, including date, category, type, duration, and optional details like titles, URLs, descriptions, word counts, and pages read. Activity timestamps track when entries are created or updated.

Goals and progress: Goal names, categories, metrics, target dates, and daily progress measurements you set and track.

User preferences: Settings and customization choices for the application.

External content metadata: When you link to YouTube videos or web articles, we automatically fetch public metadata (title, author, description, duration) via YouTube Data API and metadata services. We only collect metadata about the specific resources you link—we don't track your activity on external sites.

Technical data: Error logs for debugging, and session management data. Our hosting provider may process IP addresses and request metadata transiently for security, reliability, and debugging.

Feedback: If you submit feedback, we collect your message, optional email address, page URL, and submission time.

How We Use Information

We use your information to operate, secure, and improve LanguaTracker:

• Provide core functionality for logging, tracking, and analyzing language learning activities
• Authenticate your account and manage sessions
• Track progress toward your goals and visualize your journey
• Enrich activity logs with metadata from linked resources
• Fix technical issues and improve performance
• Send important account notifications and respond to inquiries
• Detect and prevent unauthorized access or abuse
• Comply with legal obligations

We may analyze aggregated, anonymized usage patterns internally to improve features (e.g., "Users spend an average of X minutes per day on reading activities"). This data cannot identify individuals and is not shared externally.

We do not sell your data, show advertisements, track your browsing outside LanguaTracker, or send marketing emails.

Data Storage and Security

Data is encrypted in transit (HTTPS/TLS) and at rest. We use PKCE authentication flow for enhanced security.

Authentication tokens are stored in your browser's localStorage and automatically refreshed. Regular automated backups protect against data loss.

While we implement strong security measures, no internet transmission is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry best practices.

Sharing and Third Parties

We share information with service providers who process data on our behalf:

Supabase: Provides authentication and backend infrastructure. See their privacy policy at supabase.com/privacy.

YouTube Data API: When you log activities with YouTube links, we fetch public video metadata. We do not share your personal information or viewing history with YouTube. Our use complies with YouTube API Terms of Service. To avoid this, simply don't include YouTube links in your activities.

Metadata services: We fetch metadata from linked web articles server-side. No identifying information about you is sent to external websites.

We do not sell your personal information. We may disclose information if required by law (subpoena, court order), to protect rights and safety, with your explicit consent, or in the event of a business transfer (merger, acquisition). You will be notified of ownership changes.

Legal Bases

Where applicable (e.g., in the EEA/UK), we rely on legitimate interests to operate and secure our services, on contract to provide the service you've signed up for, and on legal obligation where required by law.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your information; to object to or restrict certain processing; and to lodge a complaint with your data protection authority.

All users can:

• Access and update data through your account settings and dashboard
• Export activity logs, goals, and other data
• Delete your account and all associated data permanently (this action is irreversible)
• Choose not to provide optional information

California residents (CCPA): You have the right to know what information we collect, use, and disclose; to delete personal information; to opt-out of sales (we don't sell data); and to non-discrimination. Contact us at support@mail.languatracker.com with "California Privacy Request" in the subject line.

To exercise your rights, use your account settings or contact us at support@mail.languatracker.com. We will respond within 30 days and may verify your identity before processing requests.

Cookies and Local Storage

We use your browser's localStorage to store authentication tokens, user preferences, and application state. We use only essential cookies for session management, authentication, and security. LocalStorage is device-specific; clearing browser data will require you to log in again.

We do not use advertising cookies, third-party tracking cookies, analytics cookies, social media cookies, or cross-site tracking technologies.

Retention

We retain your data while your account is active to provide continuous service and maintain your learning history. When you delete your account, all personal data, activities, and goals are permanently deleted immediately through automated CASCADE deletion. This action is irreversible.

Data may remain in backup systems for 30-90 days for disaster recovery purposes but is not accessible or used once deleted. Backups are automatically purged according to our schedule.

We may retain certain information if required by law (tax, accounting, legal compliance) only as long as legally required. We may retain anonymized, aggregated data that cannot identify you personally.

International Transfers

Your data is stored in infrastructure which may operate data in data centers in various countries. Our providers may process data in locations outside your country of residence.

Children

Our services are not directed to children. Users must be at least 16 years old (or the age of digital consent in their country, whichever is higher). We comply with COPPA and do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn a child has provided information without proper consent, we will delete it promptly. Contact us immediately at support@mail.languatracker.com if you believe this has occurred.

Changes

We may update this policy from time to time. Material changes will be communicated via email and/or prominent notice in the application at least 30 days before taking effect. The "Last Updated" date reflects the most recent changes.

Continued use after changes take effect constitutes acceptance. If you disagree, please stop using the service and delete your account.

Contact

For privacy requests, questions, or to exercise your rights, email us at support@mail.languatracker.com. For data subject requests (access, deletion, export), include "Data Subject Request" in the subject line. We aim to respond within 7 business days.

Legal Information

This Privacy Policy is governed by the laws of the State of Delaware, United States. Disputes will be resolved through arbitration. If any provision is found unenforceable, it will be limited to the minimum extent necessary, and remaining provisions remain in effect.

This Privacy Policy, together with our Terms of Service, constitutes the entire agreement between you and LanguaTracker. This policy is written in English; any translations are for convenience only.