Privacy policy

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Email: yaroslavnashyvan@gmail.com
Phone: +491627491111

2. Overview

Lerne is a German vocabulary trainer. You can practise without an account; with one, Lerne keeps your progress. We process personal data only as far as running Lerne requires. There is no advertising, no tracking, no analytics or marketing cookies, and no third-party content embedded in the pages. Fonts are served from our own server.

3. Hosting and server

Lerne runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data center in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR). When you open a page, the server necessarily processes your IP address and the requested address to deliver it; Lerne itself does not store them. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

4. Without an account

Your language settings (native language, learning language, extra languages, levels) are kept in a cookie in your browser, and your choice of light or dark theme in its local storage. Neither is sent anywhere else.

5. Your account

You sign in through our sign-in service, the SSO, which has its own privacy policy. Lerne receives your account ID there, your email address, whether it is verified, and your name. Lerne stores them with your role, your points and their history, the words you marked as learned or bookmarked, the words you suggested or reviewed, your language settings, and when your account was created and set up. The legal basis is the performance of the contract of use (Art. 6(1)(b) GDPR).

Admins see your name, email address, points and suggestions in order to review them. Approved suggestions become part of the dictionary without your name.

6. AI-generated word data

When someone uses “Generate with AI” on a word form, only the word itself and the list of topic names are sent to the configured AI provider (OpenAI, Google or Groq, USA) — never anything about you. The legal basis is our legitimate interest in complete vocabulary entries (Art. 6(1)(f) GDPR).

7. Cookies

We only use cookies that are strictly necessary (§ 25(2) no. 2 TDDDG); no consent is required for them:

• lerne_settings: your language settings, up to one year;
• lerne_session: keeps you signed in, up to 30 days;
• lerne_oauth_state, lerne_oauth_pkce, lerne_oauth_return: protect a sign-in in progress, 10 minutes.

8. Recipients and transfers to third countries

Recipients of your data are Hetzner as our host and the SSO for signing in. Beyond that we do not pass your data on unless we are legally obliged to. The AI providers in section 6 receive no personal data.

9. Storage period

We keep your account and everything in section 5 until you delete it. Database backups are kept for 14 days at most. Settings in your browser stay until you clear them.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can export all your data and delete your account yourself on your account page; for anything else, write to the email address in section 1. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

There is no automated decision-making within the meaning of Art. 22 GDPR.

11. Changes

We update this policy when Lerne or the law changes. The version published here applies. See also the imprint.