Privacy notice

1. Controller

Name

Pócs Zsombor egyéni vállalkozó

Registered seat

1071 Budapest, Dembinszky utca 39.

E-mail

zsombinszky22@gmail.com

Registration number

55752666

We are not required to appoint a data protection officer: we carry out no large-scale or systematic monitoring and process no special categories of data.

2. What we process

Account data

E-mail address, a one-way hash of your password (we never store or see the password itself), the time of registration and e-mail confirmation, and the role assigned to the account.

Learning progress

Which exercise steps you marked complete and when. The progress meter, level and badges are derived from this.

Exercise feedback

The rating, estimated time spent and free-text comment you submit, if you fill in the form.

Technical logs

Data recorded automatically by the server and the error monitor: timestamp, requested path, error message and stack trace. Cookies, headers, form data and query strings are stripped from error reports before they leave the server.

We use no analytics or advertising trackers, build no profiles, and make no automated decisions that produce legal effects concerning you.

3. Purposes and legal bases

Running your account

Purpose: signing you in and giving access to protected content. Basis: performance of the terms of use between us (GDPR Art. 6(1)(b)).

Saving progress

Purpose: letting you resume where you left off. Basis: performance of a contract (GDPR Art. 6(1)(b)).

Feedback

Purpose: improving the exercises. Basis: consent (GDPR Art. 6(1)(a)) — submitting feedback is voluntary.

Security and debugging

Purpose: keeping the service working and preventing abuse. Basis: legitimate interest (GDPR Art. 6(1)(f)).

4. Processors

We use the following providers to operate the service. Each acts as a processor and receives only the data needed for its task.

Supabase

Database, authentication and file storage. Account data, progress and feedback are stored here.

Vercel Inc.

Hosting and application runtime.

Resend

Delivery of authentication e-mails (confirmation, password reset). It receives only your address and the message content.

Sentry (Functional Software, Inc.)

Error monitoring, using the European (German) ingestion endpoint. Reports contain no cookies, headers, form data or query strings.

News summaries are produced by the Google Gemini API. Only the text of public news sources is sent there — no user data ever reaches the language model.

5. Transfers outside the EEA

Some providers operate infrastructure outside the European Economic Area. Such transfers rely on the European Commission's standard contractual clauses or, for the United States, on the EU-US Data Privacy Framework.

6. Retention

Account data and progress

For as long as your account exists. On a deletion request the account and its progress are deleted.

Feedback

Deleted together with the account.

Error reports

According to the error monitor's retention period, at most 90 days.

News articles

Feed content is archived and then deleted automatically. It contains no personal data.

7. Cookies and local storage

We use only strictly necessary cookies, which do not require consent under the applicable rules:

• session cookie: keeps you signed in (Supabase Auth),
• password recovery cookie: binds a reset flow to your browser, short-lived,
• appearance setting: remembers your light or dark theme choice in your browser's local storage.

We use no analytics, advertising or social media cookies.

8. Your rights

• Access: you may request a copy of the data we hold about you.
• Rectification: you may ask us to correct inaccurate data.
• Erasure: you may ask us to delete your account and its data.
• Restriction: you may ask us to only store the data.
• Portability: you may request the data you provided in a machine-readable form.
• Objection: you may object to processing based on legitimate interest.
• Withdrawal of consent: you may withdraw feedback consent at any time; this does not affect the lawfulness of earlier processing.

Send your request to zsombinszky22@gmail.com. We answer within one month at the latest.

9. Complaints

If you believe the processing infringes your rights, you may lodge a complaint with the supervisory authority or go to court.

Authority

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address

Falk Miksa utca 9-11, 1055 Budapest, Hungary

E-mail

ugyfelszolgalat@naih.hu

Website

https://naih.hu

10. Changes to this notice

We update this notice as needed. For material changes we notify you after sign-in. The version in force is always available on this page.