Privacy Policy

Última atualização: junho de 2026

1. Controller

The party responsible for data processing on langula.app is:
Thomas Harnisch, Königskinderweg 74f, 22457 Hamburg, Germany
Email: [email protected]

2. Overview

Langula is designed to be data-sparing. You can use the learning content without creating an account; your progress is then stored only locally in your browser. You only need an account if you want to sync your progress across devices.

3. Hosting and server log files

Our website runs on a hosting provider with servers in Germany. When you visit, the server automatically collects information your browser transmits (server log files): browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and the IP address. This data serves the technical provision, security and stability of the site and is deleted after 7 days at the latest. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).

4. Cloudflare (CDN and security)

To deliver, accelerate and protect the site against attacks we use Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which processes your IP address among other data. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The legal basis is Art. 6 (1) (f) GDPR.

5. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption (https). Transmitted data cannot be read by third parties.

6. Cookies and consent management

We set technically necessary cookies and local storage (e.g. for login, security and your cookie choice), which may be set without consent (§ 25 (2) TDDDG, Art. 6 (1) (f) GDPR). Non-essential services (in particular advertising) load only after your explicit consent via our consent banner (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). Unknown third-party trackers are blocked by default. You can change or withdraw your consent at any time via the "Cookies" link in the footer. To document your decision we store the consent status in your browser and keep an audit-proof log entry; your IP address is stored only as a non-reversible hash with a daily salt.

7. User account and registration

If you create an account, we process the data you provide: your name (freely chosen), your email address and your password (stored only as a hash). The account stores your learning progress on our server so you can use it on several devices. The legal basis is the performance of the usage relationship (Art. 6 (1) (b) GDPR). We keep this data until you delete your account, which you can do at any time in the settings together with all associated data.

8. Sign-in with Google or Apple

Alternatively you can sign in with your Google or Apple account. Data is then transmitted to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Apple Distribution International Ltd. (Hollyhill Industrial Estate, Cork, Ireland); from there we receive your email address and name to create the account. The legal basis is Art. 6 (1) (b) GDPR (registration) and (a) GDPR (your consent at the provider).

9. Email (e.g. password reset)

For necessary account emails (such as resetting your password) we send messages via an email server, processing your email address. The legal basis is Art. 6 (1) (b) GDPR.

10. Learning progress in the browser

Your learning progress is stored in your browser's local storage so you can keep learning even without an account. This data stays on your device and — if you are signed in — is additionally synced with your account. The storage is functionally necessary.

11. Pronunciation practice (microphone)

For pronunciation practice Langula uses your browser's built-in speech recognition (Web Speech API). Your speech is only evaluated after you actively grant microphone access in the browser. We ourselves neither store nor transmit any audio — the evaluation takes place in the browser. Depending on the browser, the speech recognition may technically be processed by the browser vendor (for example by Google in Google Chrome, on its servers); we have no influence on this. If you do not grant microphone access, you simply cannot use this feature.

12. Tracking, analytics and advertising

Langula is financed through advertising. With your consent we use tracking services — to analyse and optimise our offerings and their use, and to measure the success of advertising campaigns and optimise the display of ads (currently including Google Ad Manager). This may involve cookies and similar technologies and the processing of device and usage data; depending on the service, data is transferred to third parties, including to the USA, where the providers are certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time with effect for the future.

A complete and always up-to-date list of the services used — each with the processing company, purpose, data collected, retention period, third-country transfer and a link to the provider's privacy policy — is available at any time via "Cookies" in the footer. Without your consent none of these services load; advertising is then served non-personalised only.

13. Fonts

We embed fonts exclusively locally from our own server. There is no connection to third-party servers (such as Google Fonts).

14. Contacting us

If you contact us by email, we process your details to handle the request. The legal basis is Art. 6 (1) (f) or (b) GDPR. The data is deleted once it is no longer required.

15. Your rights

You have the right at any time to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can withdraw consent once given with effect for the future (Art. 7 (3) GDPR). To do so, contact [email protected].

16. Right to complain

You have the right to lodge a complaint with a supervisory authority, in particular the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg.

17. Changes to this policy

We adapt this privacy policy whenever the data processing or the legal situation changes. The version available when you access the site applies.