Privacy and data protection notice
What is collected, why, where it goes, how long it stays, and how to have it removed. Written from the code, not from a template.
Last updated September 7, 2026
Who is responsible
Uzay Gökçek
uzaygokcek941@gmail.com
What is collected
- With an account: your email address, the name you give, and a hash of your password. Never the password itself.
- Without an account: a random key kept in your browser. It identifies a device, not a person.
- What you do here: which lessons you watched, your explanations as text, quiz answers, and what you write about a task with any link you add.
- Your recording is sent to a speech-to-text service and only the text comes back. No audio is stored.
- Your country and time zone are read from the request to pick a language and count streaks; neither is stored.
- Your IP address is used for rate limiting and kept in a counter for at most one day.
Where it goes
- Database: Neon, hosted in Frankfurt (EU).
- Speech-to-text and feedback: Groq, hosted in the United States. Your recording and your written text are sent there to be processed, which is a transfer outside the EU and Türkiye. Their own agreement says they may not train on what is sent and do not retain it for ordinary requests like these; they may keep logs for up to thirty days while investigating a fault or abuse. That is their commitment, quoted from their terms, not a guarantee this app can give on their behalf.
- Hosting: Vercel, in Frankfurt (EU). The application runs in the same region as the database, so pages and records are handled and stored inside the EU. The one exception is the item above: your recording and the text of your explanation are sent to the United States to be marked. This is measured from the response headers, not assumed - and it was not always so: until 6 September 2026 the application ran in the United States by default, and anything typed crossed the Atlantic on its way to a database that was already here.
- Videos sit in YouTube's and TikTok's own players. No player is built until you press play, so the page does not hand your address to one for every lesson on it. Your address reaches Google before that anyway: the still image on each lesson comes from their image servers, and the player's script is fetched ready for the first press. Measured on one course with nothing clicked - twelve requests to Google, ten of them images and two for that script, and five youtube.com cookies already in the browser. The count varies with how many lessons are on screen. Until 7 September 2026 the YouTube player was embedded from youtube-nocookie.com. It was dropped after being measured: on page load it changed nothing at all, the same twelve requests and the same five cookies, because the player's script comes from youtube.com either way. What it did do was keep you signed out of the player, so somebody paying for YouTube Premium was shown ads here and not on YouTube. The player now comes from youtube.com and carries your YouTube session, so your own subscription applies. The cost is in the same measurement: pressing play now also reaches Google's advertising servers, googleads.g.doubleclick.net, which it did not before.
Cookies
Two of ours, both required for the site to work: one holds your sign-in, one holds your language choice. We set no tracking or advertising cookies. YouTube's embedded player sets its own - measured, five were already in the browser before anything had been clicked - so the paragraph above about videos is the one that matters when deciding whether this page needs a consent banner.
How long
- Account data stays until you delete the account. Deleting it removes your explanations, progress, quiz results, task notes and sessions in the same step.
- Data tied to a browser key with no account is deleted in full once that key has gone twelve months without any activity. Clearing your browser storage detaches it from you.
Your rights
You can ask what is held about you, have it corrected or deleted, object to processing, and withdraw consent. The account page does two of these without asking anyone: it downloads everything held about you as a file, and it deletes the account outright. For the rest, write to the address below.