Privacy notice

Contact Libraski at support@libraski.com about your data or your rights. Available provider information is linked in the legal notice.

We process your email address, display name, password hash, registration date, settings and any profile image or text you provide. Required account details are necessary to create a personal account. Learning data includes completed lessons, answers and assessments, review needs, XP, streaks, hearts and daily goals. Confirmed answers in interrupted standard lessons can be restored within four hours; this validity period is not a general retention period for learning history. Processing provides the account and requested learning features under Article 6(1)(b) GDPR.

The website and database run in a self-managed server environment. Connection information such as IP address, time, requested resource and browser details is processed for delivery and security. Security and administrative events help investigate abuse and protect availability, based on our legitimate interest in a secure service under Article 6(1)(f) GDPR.

Essential cookies support sign-in, language, MFA and support chat when used. Session cookies last no more than 30 days. Browser storage also supports selected preferences and installable app functions. Strictly necessary storage or access falls under section 25(2)(2) TDDDG; personal data follows the legal basis for its purpose. Your analytics choice is remembered in this browser for up to 180 days, after which we ask again.

Google Analytics 4 measures public home, course, help and guide pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; measurement ID G-KXK6XV3L25. It loads only after you actively agree. Without consent this integration sends no requests to Google Analytics. Once enabled, Google can process cookie identifiers, page views, browser and device information and the IP address needed for the connection.

We send fixed public page addresses without query strings or fragments, a generic page title and limited referral information: on entry, only the domain of an explicitly allowed search engine is sent; subsequent page views may include the previous public Libraski page. Search terms, full external referring addresses and other external referrers are not sent. Account, profile, learning, support case and admin pages are excluded. Signed-in visitors are also excluded on public pages. We do not send email addresses, account IDs or learning answers as analytics parameters, and do not enable advertising personalisation, Google Signals or User-ID. Google Analytics may generate technical events such as session start and first visit.

The _ga and _ga_KXK6XV3L25 cookies last no more than 180 days. Consent is the basis under Article 6(1)(a) GDPR and section 25(1) TDDDG. You can withdraw it at any time through Cookie settings, stopping future collection and removing the integration and its accessible cookies. Withdrawal does not affect the lawfulness of previous processing.

Google may process data outside the European Economic Area. Its data-processing and international-transfer terms are linked below. Actual Google account retention settings and contractual transfer arrangements still require confirmation by the operator. Cookie lifetime is not the same as retention by Google.

Support processes your contact details, messages, attachments where supplied and case history. Authorised staff access these to help you. Account and contract requests use Article 6(1)(b) GDPR; other requests use our legitimate interest in responding under Article 6(1)(f). Email uses our own mail infrastructure and the mail services involved in delivery. Necessary account messages serve the requested account function; marketing requires consent.

Optional reminders can be managed in Settings. Push delivery is currently disabled. When offered, push notifications require permission and store a technical delivery endpoint and browser keys. Delivery uses the push provider of your browser or device. You can revoke permission in Settings and your browser. Optional notifications rely on consent under Article 6(1)(a) GDPR.

Other users see information and activities you share through your visibility settings and chosen social functions. Private email addresses and individual learning answers are not made public through these features. Processing provides the requested features under Article 6(1)(b) GDPR.

Pronunciation features access the microphone only when requested and permitted by your browser. Recording for self-comparison creates a temporary recording in the browser and does not upload it to Libraski. Browser speech recognition may send audio to the browser’s recognition provider; the provider and processing depend on your browser. Participation is optional and you can revoke microphone access. The basis is consent under Article 6(1)(a) GDPR. Lesson audio is hosted by Libraski; fallback browser speech synthesis depends on the chosen voice and browser.

Account and learning data generally remain while your account exists. You can delete your account in Settings or contact us. Some records may remain where required for legal obligations or legal claims, with processing limited to those purposes. Sessions and security tokens have their own validity periods. Specific operational retention periods for logs, support records and backups still require confirmation; we do not state unverified fixed periods.

You may request access, correction, deletion, restriction and, where applicable, portability under Articles 15–20 GDPR. Data export and account deletion are available in Settings.

You may withdraw consent for future processing. You may object to legitimate-interest processing on grounds relating to your situation, and to direct marketing at any time (Article 21). You may complain to a supervisory authority, particularly in the country of your habitual residence, workplace or alleged infringement (Article 77).