Account and learning
Email, authentication identifiers, progress, answers, and saved learning state to provide the service.
Proposed basis: contract or requested pre-contract steps; operator confirmation required.
Draft — not legally approved: this page describes the data flows visible in the product and repository. The controller details, production-service inventory, retention decisions, and legal review still require operator evidence. The page remains excluded from search until then.
Privacy Policy
Last updated: 14 September 2026 · Applies to deutsch-meister.de
1. Controller and contact
Controller: [full legal name of the controller]
Address: [street, postal code, city, country]
Privacy email: zaid@deutsch-meister.de
DeutschMeister is an online German-learning platform at deutsch-meister.de.
2. Processing at a glance
AI learning tools
Sentences, transcripts, and task context to return analysis, speaking, writing, or answer feedback.
Proposed basis: providing the requested feature; operator confirmation required.
Analytics
Online identifiers and usage events to understand and improve the product.
Basis: consent; optional analytics are not loaded before acceptance.
Payments
Order, customer, and entitlement metadata to process purchases and unlock access.
Proposed basis: contract and accounting obligations; final review required.
Emails
Email address and delivery events for account messages and opted-in learning emails.
Proposed basis: service delivery or consent, depending on the message.
3. Hosting and technical delivery
The website and server functions are delivered through Netlify. Hosting providers necessarily process technical request data such as IP address, time, requested URL, browser information, and error/security logs so the site can be delivered and protected. The exact production log retention and transfer settings still require verification in the operator account.
4. Accounts and learning records
Supabase provides authentication and database services. We process the email address and authentication identifiers associated with an account, plus learning progress, submitted answers, saved vocabulary, and access status generated while the service is used. Read Supabase’s privacy information.
5. AI features
When you actively use Sentence X-Ray, AI speaking, writing evaluation, or AI answer explanations, the text you submit and the context needed to answer it are sent from our servers to the relevant AI provider. The repository currently integrates Anthropic for language feedback and OpenAI for speech processing. Account passwords and card details are not part of these requests. Speaking audio is processed to create a transcript; the product is designed to keep the transcript and evaluation, not the audio file.
Do not enter sensitive personal information into learning prompts. Provider account settings, retention, and international-transfer safeguards must be verified before this draft is approved.
6. Optional analytics and your choice
Google Analytics 4 and PostHog are optional. Their scripts load only after
you choose “Accept” in the consent banner. If you decline, the product does
not initialize those analytics tools. The preference itself is saved in
your browser’s local storage as dm_cookie_consent so the site
can remember your choice.
7. Payments
Lemon Squeezy acts as merchant of record for paid access. Payment details are entered with Lemon Squeezy; DeutschMeister receives order, customer, subscription, and entitlement metadata needed to grant or remove access. Read Lemon Squeezy’s privacy information.
8. Email
Resend delivers account and service messages and, where requested, learning emails. Optional messages include an unsubscribe path. Read Resend’s privacy information.
9. Recipients and international transfers
The service is designed to send the named providers only the information needed for their role. Some providers operate from or use infrastructure outside the European Economic Area. The operator must verify each production account’s processing region, data-processing agreement, subprocessors, and applicable transfer safeguards before legal approval. The repository contains no feature for selling personal data; the operator must confirm that statement.
10. Retention and deletion
Account and learning information is kept while it is needed to provide the account and is deleted or anonymized after a valid deletion request, unless a legal obligation requires specific records to be retained. Purchase and accounting records may need to be retained for statutory periods. Analytics and provider-specific retention settings still require operator verification; no exact period is claimed in this draft until that evidence is recorded.
11. Your data-protection rights
Depending on the circumstances, you may request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing. You may withdraw consent at any time without affecting processing that was lawful before withdrawal. Email zaid@deutsch-meister.de. We respond without undue delay and normally within one month; identity may need to be confirmed before account data is disclosed or deleted.
You also have the right to complain to a competent data-protection supervisory authority. The locally competent authority depends on the controller address that is still missing from this draft.
12. Changes to this notice
This notice will be updated when data uses, providers, or legal requirements change. Material changes will be communicated in an appropriate way. The effective date will be recorded when the controller facts and legal review are complete.