Privacy Policy

Data controller

LëtzLearn is operated by Lothringer (contact@lothringer.co.uk). Lothringer is the data controller responsible for your personal data.

What data we collect

When you create an account and use LëtzLearn, we collect:

• Your username and email address, provided during registration.
• Your password, stored as a cryptographic hash (we never store your password in plain text).
• Your learning progress — which lessons you have completed and your quiz scores.
• Your language preference (English or French).
• Your date of birth, provided during registration.
• Your town or city, provided during registration.

How we use your data

We use the data collected for the following purposes:

• To create and manage your account and keep you signed in.
• To save and display your learning progress across sessions.
• To send a welcome email when you register.
• To improve the website using aggregated, anonymised analytics data (Google Analytics).
• To verify that you meet the minimum age requirement of 13 years, using your date of birth.

Legal basis

We process your personal data on the basis of contractual necessity (to provide the LëtzLearn service you signed up for). Analytics and advertising cookies are set only with your explicit consent via our cookie consent panel, which you may update at any time. Your date of birth and town or city are not shared with advertising partners and are not used for ad personalisation.

Data retention

Your account data is retained for as long as your account is active. If you wish to have your account deleted, please contact us at contact@lothringer.co.uk and we will action your request within 30 days. Payment records may be retained for up to 7 years to comply with financial regulations.

Third-party services

We share data with the following third parties:

• Google Analytics (Google LLC) — anonymised usage statistics. Google may process data in the United States under the EU–US Data Privacy Framework.
• Azure Communication Services (Microsoft Corporation) — used to send transactional emails (e.g. welcome emails). Microsoft processes data in accordance with its Data Protection Addendum.
• Stripe, Inc. — used to process subscription payments. Stripe may process data in the United States. See Stripe's Privacy Policy for details.
• Google AdSense (Google LLC) — used to serve advertisements on free pages. Google may set cookies and process data in the United States under the EU–US Data Privacy Framework.

We do not sell your personal data to any third party.

Cookies

We use cookies to keep you signed in and to collect anonymous analytics data. For full details, see our Cookie policy.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ('right to be forgotten').
• Receive your data in a portable format.
• Object to processing based on legitimate interest.
• Request restriction of processing in certain circumstances.
• Withdraw consent for analytics cookies at any time (via our cookie banner or browser settings).
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data is being processed unlawfully.

Security

Passwords are hashed using scrypt with a unique salt. Sessions are stored server-side and protected with a secret key. We apply reasonable technical measures to protect your data, but no system is completely secure.

Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page.

Contact us

For any privacy-related questions or to exercise your rights, please contact: contact@lothringer.co.uk