Legal

Privacy Policy

Last updated: June 2025 · Questions? privacy@crackgerman.com

1. Who We Are

CrackGerman ("we", "our", "us") is an English-to-German language learning web app available at https://crackgerman.com. We are committed to protecting your personal data in accordance with applicable data protection law.

2. What Data We Collect

·Account data: When you sign in via Google or GitHub OAuth, we receive your name, email address, and profile picture from that provider. We do not store your password.

·Learning data: Your lesson progress, XP earned, streak count, vocabulary mastery (SRS data), quiz results, and mistake log.

·Usage data: Pages you visit, features you use, and timestamps of activity — used to improve the product and personalize your experience.

·Newsletter email: If you subscribe, we store your email to send occasional German learning tips. You can unsubscribe at any time.

3. How We Use Your Data

·Provide and personalize the CrackGerman learning experience

·Calculate XP, streaks, leaderboard rankings, and SRS review schedules

·Send optional newsletter emails (only if you subscribed)

·Improve app performance and fix bugs

·Comply with legal obligations

4. Third-Party Services

CrackGerman uses the following third-party services, each with their own privacy policies:

·Google / GitHub OAuth — sign-in providers; we receive only the data listed in §2

·Turso (libSQL) — database hosting; data stored in the EU/US

·Vercel — hosting and edge network

·Cloudflare R2 — file storage (audio assets)

·Resend — transactional email (password-less magic links, if used)

5. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

·Access the personal data we hold about you

·Request correction or deletion of your data

·Object to or restrict certain processing

·Port your data to another service

To exercise these rights, email privacy@crackgerman.com.

7. Cookies

CrackGerman uses a session cookie for authentication (set by NextAuth.js). We do not use third-party advertising cookies. Your browser's local storage is used to save in-progress lesson state and bookmarks.

8. Security

We use HTTPS for all data in transit, bcrypt-equivalent hashing for any stored tokens, and restrict database access to authorised infrastructure only. No security system is perfect; please notify us immediately at privacy@crackgerman.com if you discover a vulnerability.

9. Children

CrackGerman is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of material changes and update the "last updated" date above. Continued use of CrackGerman after changes constitutes acceptance.

11. Contact

For all privacy enquiries: privacy@crackgerman.com

← Back to CrackGerman Terms of Service →