Privacy Policy

Last updated: April 24, 2026

BrokenLingo is a web application for learning languages. This page describes what data we collect, why we collect it, and what we do with it. By using the application, you agree to this data processing as described below.

Who is the data controller

The data controller is the operator of BrokenLingo. To exercise your rights or for inquiries, please contact us at: hello@brokenlingo.com.

What data we collect

If you are not signed in:

• Anonymous ID – a randomly generated identifier stored in your browser (localStorage) to track usage of the application across visits from the same device. This ID is not shared with other sites and cannot be used to identify you.
• Usage statistics – button clicks, completed levels, selected languages, time spent on exercises, errors in tests.
• Technical data – browser type (Chrome/Safari/Firefox etc.), without storing the full browser identifier.
• Referral source – if you arrive at the application from a link from another site (Instagram, Google, etc.), we store the domain of that site so we know which channels work.
• UTM parameters – if you came from a marketing campaign (with utm_source, utm_medium, utm_campaign parameters in the URL), we store these parameters.

If you are signed in via Google account:

• Email address – to identify your account when signing in.
• Google user ID – a technical identifier assigned by Google.
• Your learning progress – mastered words, levels, study statistics.
• Everything from the previous section (anonymous statistics) continues to be collected and linked to your account.

We do not store: your IP address, precise geolocation, full user-agent string, password (Google handles login).

Why we collect this data

• Application functionality – login, progress synchronization across devices, data loss recovery.
• Legitimate interest (Art. 6(1)(f) GDPR) – analyzing application usage to improve it, understand which features work and which don't, and target relevant audiences. We analyze data only in aggregate (i.e., we are not interested in the behavior of a specific user, but in trends across all users).

How long we keep data

• Analytics data – indefinitely, with gradual deletion of older records (older than 2 years).
• User account – until you cancel the account.
• Learning progress – until you cancel the account or press the "Reset progress" button.

Who we share data with

We do not share data with third parties for marketing purposes. We use the following processors (service providers):

• Supabase (database and authentication) – data processing agreement, EU servers.
• Netlify (application hosting) – without storing personal data beyond standard server logs.
• Google (login) – only if you choose to sign in with a Google account.

Your rights

In accordance with GDPR, you have the right to:

• Access the data we hold about you.
• Correction of inaccurate data.
• Erasure (right to be forgotten).
• Restriction of processing.
• Data portability.
• Object to processing based on legitimate interest.
• File a complaint with your local data protection authority.

To exercise these rights, please contact us at the email address above. As a signed-in user, you can reset your progress at any time in Statistics → Reset progress.

Cookies and similar technologies

BrokenLingo does not use tracking cookies. We only use:

• Your browser's localStorage to save your progress and preferences. This data is stored only in your browser and you can delete it by clearing site data.
• Supabase authentication cookies – only if you are signed in via Google account, to maintain your signed-in session.

Changes to this policy

We may update this policy from time to time. We will inform you of significant changes through the application. You can see the date of the last update at the top of this page.