Privacy Policy

The controller is the operator of openhebrew.net (the "Operator"). Contact for data protection matters: privacy@openhebrew.net.

• Account data: identifier, name and e-mail address received from the sign-in provider (Google or Apple). The profile picture of the sign-in provider is neither stored nor used.
• Profile data: nickname, avatar and settings provided by the user; results of the automated check of uploaded avatars (date and assessment categories). Rejected images are not stored.
• Usage data: personal vocabulary, tags, own words, learning progress, game answers and results, watched videos. Search history in the Application is stored only on the device.
• User content: comments, likes, error reports and word suggestions. Comments are published together with the user's nickname or, in its absence, the first name received from the sign-in provider.
• Technical data: IP address, device and browser information, device identifiers, server logs, crash and performance data.
• Analytics data: interaction with the Service; on the website, subject to consent.
• Advertising data in the Application: see section 5.
• Correspondence with the Operator.

• Provision of the Service and performance of the contract with the user (Art. 6(1)(b) GDPR).
• Security of the Service, prevention of abuse, enforcement of usage limits, moderation of user content and correction of errors (legitimate interests, Art. 6(1)(f) GDPR).
• Improvement of the dictionary on the basis of user reports (legitimate interests, Art. 6(1)(f) GDPR).
• Analytics: on the website, consent (Art. 6(1)(a) GDPR; consent may be withdrawn at any time via "Cookie settings"); in the Application, legitimate interests (Art. 6(1)(f) GDPR).
• Display of advertising in the Application (legitimate interests, Art. 6(1)(f) GDPR; personalised advertising, consent, Art. 6(1)(a) GDPR).
• Compliance with legal obligations (Art. 6(1)(c) GDPR).

Account data is not sold and is not disclosed to advertisers. Advertising data in the Application is processed by Google as set out in section 5. User content may be checked by automated means prior to publication; such checks do not produce legal or similarly significant effects within the meaning of Art. 22 GDPR, and contested decisions are reviewed by a human upon request.

Personal data is disclosed only to the extent necessary to the following categories of recipients acting as processors on the basis of data processing agreements: hosting, database and authentication providers; providers of artificial-intelligence services (text content only, without account identifiers); providers of automated image analysis (uploaded avatars only, without account identifiers); e-mail delivery providers; error monitoring and, subject to consent, analytics providers; providers of embedded video content.

Data may be disclosed to public authorities where required by law.

The Application displays advertising provided by Google AdMob (Google LLC). For this purpose Google may collect the advertising identifier of the device (IDFA, only with the permission given by the user in the Apple "Allow Tracking" prompt), approximate location derived from the IP address, data on ad impressions and clicks, and diagnostic data of the advertising software. Personalised advertising is shown only with consent; otherwise non-personalised advertising is shown. Permission to track may be withdrawn at any time in the device settings.

Google processes such data as an independent controller in accordance with its own policy. The website does not display advertising.

The Service is hosted in the European Union. Certain recipients may process data in third countries, including the United States and the United Kingdom. Such transfers are based on an adequacy decision of the European Commission or on the Standard Contractual Clauses (Art. 45–46 GDPR).

• Account, profile, usage data and user content: for the lifetime of the account; deleted, including comments, immediately upon deletion of the account in the profile settings on the website or in the Application (Menu → Profile), or within 30 days of a deletion request. A replaced avatar is deleted upon replacement.
• Results of avatar checks: for the lifetime of the account, unless removed earlier.
• Error reports and word suggestions: up to 2 years after processing.
• Usage limit counters and server logs: up to 30 days.

The data subject has the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time without affecting the lawfulness of prior processing. Requests are to be sent to privacy@openhebrew.net from the e-mail address associated with the account and are answered within one month.

The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of habitual residence or place of work.

The Service is not intended for persons under 13 years of age. Data of such persons is not knowingly processed and is deleted upon becoming known.

The Operator applies appropriate technical and organisational measures, including encryption in transit and at rest and restriction of access to personal data. Avatars are additionally stored in encrypted form.

The Operator may amend this Privacy Policy. Material amendments are announced on the Service in advance. Effective date: 5 November 2026.