Privacy Policy

Plain English. What we collect, why we collect it, how long we keep it, and what your rights are. Last updated: August 2026.

This policy applies to linguvias.com and all its subpages. The site is operated as a personal project. If you have questions, use the contact form.

What We Collect and Why

Page view analytics

We record a timestamp and the URL path for each page load. No cookies are set, no IP address is stored, no unique visitor identifier is created, and no data is sent to third parties. This gives us a rough sense of which pages are useful without tracking you as an individual across sessions. There is nothing to opt out of because nothing identifies you.

Newsletter sign-ups

If you enter your email address to subscribe to the newsletter, we store your email address and the date you subscribed. We use this to send occasional email updates about new content and resources. We do not share this list with anyone, ever. To unsubscribe, use the unsubscribe link in any email, or contact us and we will remove you immediately.

Visitor accounts

If you create an account, we store your username, email address, a hashed (not readable) version of your password, and any flashcard progress you record. Your password is hashed using bcrypt — we cannot read it even if we wanted to. Your flashcard progress data belongs to you and is not used for any purpose other than powering the progress features you can see on your account page.

Contact form messages

If you use the contact form, we store your name, email address, and message. We use these only to reply to you. We do not add contact form senders to the newsletter list.

Shop purchases

If you buy a PDF guide, your email address and the details of your order are stored. Payment is processed entirely by Stripe — we never see or store your card details. Stripe's privacy policy is available at stripe.com/privacy. We keep order records for accounting and to reissue download links if needed.

Cookies

We use one session cookie, set by PHP, which keeps you logged in if you have an account. It contains no personal information and is deleted when you close your browser (or when your session expires). We do not use advertising cookies, third-party tracking cookies, or analytics cookies. There is no cookie consent banner because there is nothing to consent to beyond the session cookie, which is strictly necessary for the login feature to function.

Third Parties

We do not sell, share, or rent your data to any third party. The only third-party services that touch your data are:

Stripe — payment processing for shop purchases. Data shared: the email you enter at checkout. Stripe's privacy policy: stripe.com/privacy.

Google Fonts — the fonts used on this site (Fraunces and Archivo) are loaded from Google's servers, which means Google receives your IP address when you visit. To avoid this, you can disable remote fonts in your browser settings. We are considering self-hosting the fonts in a future update.

There are no advertising networks, social media pixels, retargeting scripts, or analytics services (such as Google Analytics) on this site.

Data Retention

Newsletter subscriptions are kept until you unsubscribe. Account data is kept until you ask us to delete it. Contact form messages are kept for up to 12 months and then deleted. Order records are kept for 7 years for accounting purposes (legal requirement). Anonymous page view records (path + timestamp, no user link) are kept for 90 days and then deleted.

Your Rights

Under UK and EU data protection law, you have the right to:

— Access the personal data we hold about you
— Correct any inaccurate data
— Delete your account and associated data
— Export your data in a portable format
— Object to processing where we rely on legitimate interests

To exercise any of these rights, contact us. We will respond within 30 days.

Security

Passwords are hashed with bcrypt. The site is served over HTTPS. Sensitive files (database credentials, PDF downloads) are blocked from direct web access via server configuration. We take reasonable precautions but cannot guarantee absolute security — no website can.

Children

This site is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted data to us, please contact us and we will delete it.

Changes to This Policy

If we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of the site after a change constitutes acceptance of the new policy.