Privacy Policy

When you create an account: your email address, name and phone number (if you fill it in). Passwords are hashed with bcrypt before they are stored — we neither keep nor can read your password.

While you study: the words you save, your review schedule, the words you looked up in each reading text, your answers and score for each test, and the passages you highlighted.

When you buy something: your email address, name, phone number, what the order contains, and the transaction data our payment provider sends back when the payment is reconciled. We do not receive or store your card or bank details.

When you download a file: the time of the download, the IP address and the browser. Used to spot account sharing, and to help you when you report that a download failed.

When you get the password wrong several times: a hash of the email address and the IP, kept for 15 minutes, to block password guessing. That hash cannot be turned back into an email address.

eDeutsch and the Deutsche Zeit school run on one and the same database, because the same team runs both. That matters to you:

If you are a student at the school, your vocabulary book and your exercise history in the two places are one and the same. Study here and your teacher sees it in the school system, and the other way round. That is deliberate — so you never have to start over.

If you only signed up at eDeutsch and have never studied at the school, your learning data sits in its own area and the school teachers do not see it.

Supabase — stores the database and the document files.

OpenAI — receives the word or sentence you look up, the text you wrote for grading, and your voice when you practise speaking. Only the content that has to be processed is sent; your name and email are not.

Resend — sends you email (verification, orders, password resets).

SePay — reconciles bank transfer payments.

We do not sell your data, and we do not use it to run advertising.

Every PDF you download carries your name, email address and order number at the foot of each page and in the file properties. The point is to trace the source if a document leaks — not to watch what you read.

Said plainly, so you know in advance: if you pass a file on and it turns up in public, we can tell which account it came from.

We use exactly two: the sign-in session cookie (kept 30 days, signed, readable only by the server) and the cookie that records a referral code when you arrive through a partner link (kept 60 days).

There are no advertising trackers, and no ad-network script is embedded anywhere.

You can delete any word from your vocabulary book at any time, right inside the product.

To see everything we hold about you, or to have your account deleted, write to deutschvn.info@gmail.com. We deal with it within 7 working days.

One thing to know: deleting your account also ends access to the materials you bought, because that access is tied to your email address. Paid orders themselves still have to be kept, as the rules on invoices and accounting records require.

The product is for people aged 15 and over. If you are under 15, ask a parent or guardian to hold the account for you.

If something changes materially we tell you by email before it takes effect. The date of the last update is always at the top of this page.