GTLearn

Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains how GTLearn, a service operated from the United States, collects, uses, and protects information when you use our vocabulary-learning application.

Information we collect

When you sign in by email, we collect your email address and temporarily store a hashed, one-time login code. We do not collect or store a permanent password. When you choose “Continue with Google,” we receive your Google account identifier, email address, and email-verification status through the openid, email, and profile scopes. We do not receive or store your Google password.

We also store content you provide to the service, such as vocabulary, translations, notes, language-pair settings, uploaded CSV data, and learning progress. We process basic technical information needed to operate and secure the service, including session cookies, IP addresses used for abuse prevention and rate limiting, and request information recorded in server logs.

How we use information

We use this information to create and authenticate your account, provide dictionary and flashcard features, import the vocabulary files you request, track learning progress, maintain security, troubleshoot errors, and send requested one-time login codes.

Google user data

Information received from Google is used only to identify your account, sign you in, and maintain your authenticated session. GTLearn does not use Google user data for advertising and does not sell it. The application does not request access to your Google Drive, contacts, email, calendar, or Google Translate account history.

Sharing and service providers

We do not sell or rent personal information. Google Cloud Platform provides application hosting, load balancing, and database infrastructure. Mailjet processes email addresses and message-delivery information to send requested one-time login codes and service emails. Google processes the limited account information described above when you choose Google sign-in. These providers process information only to provide their services to GTLearn under their applicable data-processing terms. Information may also be disclosed when required by law, to protect users, or to address fraud and security issues.

Cookies and security

We use essential session and request-security cookies for up to 30 days. If you use Google sign-in, a temporary OAuth security cookie expires after 10 minutes. We also use browser local storage for your application settings and to remember that you dismissed the cookie notice. We apply reasonable technical and organizational safeguards, but no internet service can guarantee absolute security.

Data retention and deletion

We retain account information and learning content while your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and protect the service. Authentication sessions expire after 30 days; expired session records are deleted at startup or by a cleanup process that runs every 24 hours. Hashed one-time email login codes expire after 10 minutes, and used or expired email-authentication records are deleted at startup or by a cleanup process that runs every 9 minutes. You may request deletion of your account and associated personal information by emailing contact@mcher.dev.

Your choices

You can choose not to sign in with Google and use a one-time email code instead. You may update your vocabulary and language settings in the application. You can also revoke GTLearn access from your Google Account permissions page; doing so stops future Google sign-in but does not automatically delete your GTLearn account.

Changes to this policy

We may update this policy as the service changes. We will publish the revised policy on this page and update the date above.

Contact

For privacy questions or data-deletion requests, email contact@mcher.dev.