Privacy policy

The short version

• There are no accounts. Your progress and settings are stored only on your device and are never sent to us.
• Usage analytics run only if you click “Allow analytics”. Until then nothing is sent and no cookie is set.
• Analytics never include what you type, and are hosted in the EU.
• You can change your mind or wipe everything on this page at any time.

Who is responsible

PolishUp is run by Antonio Furioso, the data controller for this website. Contact: contact address coming soon.

What stays on your device

The app keeps these in your browser’s local storage, under keys that start with polish.:

• your answer history (which card, right or wrong, the kind of mistake, the date and time) and the progress worked out from it: streak, daily goal, what is due for review;
• your settings: daily goal, new words per day, sound on or off, the last options you chose for each exercise;
• your analytics choice, and the day the “goal met” event was last sent.

None of this is transmitted to us or anyone else. It is not a cookie and it stays until you clear it. Your typed answers are graded in your browser and are not stored or sent anywhere.

Analytics, only with your consent

If you allow it, we use PostHog to learn how the app is used, for example how many people come back a week later. The data goes to PostHog’s EU cloud (servers in Frankfurt, Germany). PostHog acts as our processor under a data processing agreement.

When analytics are on, PostHog receives:

• page views: the page address (for a practice session that includes its settings, such as the exercise type), the referring page, browser, operating system, device type and screen size;
• “session started” and “session finished”: where the session came from (today’s practice or a chosen exercise), which exercise, how many questions, how many were right;
• “answer”: which exercise, and whether the answer was right, nearly right (missing accents) or wrong. Never the answer itself;
• “goal met”: your daily goal and streak length, at most once a day;
• “app installed”: when you add the app to your home screen;
• a random ID created in your browser so visits can be counted as the same visitor, kept in a first-party cookie and in local storage (names starting with ph_);
• your IP address, which PostHog uses to work out an approximate location (country and city) and which we have set PostHog to discard.

We do not use autocapture, session recordings, surveys or advertising, and we do not link this data to your name or e-mail (we never ask for them). Events are kept for 12 months, a retention period set in our PostHog project, and then deleted.

Analytics are switched off on this version of the site: nothing is sent.

Cookies

No cookies are set before you allow analytics. With analytics on, PostHog sets one first-party cookie holding the random ID above (it expires after a year). Choosing “No thanks” later deletes it.

Sentence audio

When you play a sentence, its text (the Polish exercise sentence the app made, never your answer) and the voice name are sent to our audio service, a Cloudflare Worker, which returns a recording. Like any web request, Cloudflare sees your IP address and browser; the Worker does not log them, and uses the IP address only to limit how many new recordings one visitor can request per minute. If a sentence has not been recorded yet, the Worker may send its text (and nothing about you) to Microsoft Azure’s speech service to create one.

If the audio service is unavailable, your browser’s own speech engine reads the sentence instead. Some browsers process that text on their maker’s servers; that is covered by your browser’s privacy policy.

Hosting

The site is served by Cloudflare Pages. Cloudflare processes your IP address and browser details to deliver the pages and protect the site from attacks, as any web host does.

Legal basis

Analytics: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time without affecting anything you did before. Serving the site and the audio: our legitimate interest in running a working, secure website (Article 6(1)(f)). The data on your device is under your control and is not processed by us.

Transfers outside the EU

Analytics data is stored in the EU. PostHog, Cloudflare and Microsoft are companies with operations in the United States; where data may be accessed from outside the EU, they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you, and get a copy;
• have it corrected or erased;
• restrict or object to its processing;
• withdraw your consent at any time, with the buttons above;
• complain to the data protection authority where you live or work.

Write to contact address coming soon to use these rights. Analytics data is tied only to a random ID, so we may need that ID from you to find it; withdrawing consent deletes it from your device and stops all further collection.

Changes

If this policy changes, the new version is published here with a new date. If the change affects what analytics collect, we will ask for your consent again.