Privacy Policy

This policy explains what personal data Selgeks (“we”, “us”) collects when you use this website and the Selgeks learning app, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR). We’ve tried to write it like humans, not lawyers.

Who is responsible for your data

The data controller is Wugge OÜ (Aiandi tn 9/1-13, 12915 Tallinn, Estonia). Full operator details are on our legal notice page. For any privacy question or to exercise your rights, contact us at [email protected].

What we collect, and why

1. If you create an account

• Email address and display name — to identify your account and sync your progress.
• Password — stored only as a secure one-way bcrypt hash. We never see or store your actual password.
• Google account identifier — only if you choose “Continue with Google”, to link your sign-in.
• Account creation date.

Legal basis: performance of a contract (providing the account you asked for).

2. Your learning progress

Your XP, completed stages, learned words, streaks and similar progress data, so the course remembers where you are. If you learn signed-out, this is stored against an anonymous per-device identifier until you create an account (at which point it is merged into your account).

Legal basis: contract (account holders) / legitimate interest (guest progress on your device).

3. Information stored on your device

The app stores a few items in your browser’s local storage to function: a sign-in token (so you stay logged in), an anonymous guest identifier, and small interface flags (for example, whether you’ve seen the intro). These are strictly necessary for the app to work and are not used for advertising.

4. Audio (text-to-speech)

To play native-quality Estonian audio, the words and sentences in a lesson may be sent to TartuNLP, Estonia’s public speech-synthesis service, which returns the spoken audio. Only the lesson text is sent — never your personal data.

5. Writing feedback (optional AI grading)

If you submit a writing exercise for feedback, the text of your answer — together with the task prompt and grading rubric, but not your name, email or account identifier — is sent to our AI grading provider, Anthropic, which returns a score and suggestions. Please don’t include personal details in your answers that you wouldn’t want processed this way.

Legal basis: performance of a contract (providing the feedback feature you chose to use).

6. Analytics

We use Rybbit, a privacy-first, cookieless analytics tool that we self-host on our own server, to understand which pages and lessons help people learn Estonian. Because it runs on our own infrastructure, this usage data is never sent to a third-party analytics company, and we never sell it.

On this marketing website, analytics is anonymous and aggregate: it sets no cookies, stores no identifier on your device, and does not track you across other websites. For each visit we record only coarse, non-identifying information:

• the pages you open and the referrer or campaign link (UTM) that brought you;
• your approximate location, at country level only, derived from your IP address — the IP is used momentarily for this and is not stored;
• your browser, operating system and device type, screen size and language.

None of this is combined into a profile that identifies you, and no advertising profile is built. Because it is anonymous and uses no storage on your device, we run website analytics by default, without a cookie wall, on the basis of our legitimate interest in measuring and improving the site. You can object and opt out at any time — from the banner, the footer, or the cookies page — and we automatically honour your browser’s “Do Not Track” / Global Privacy Control signal, in which case nothing loads.

Legal basis (website): legitimate interest — Art. 6(1)(f) GDPR, privacy-preserving aggregate audience measurement with an opt-out.

Inside the learning app, while you are signed in, we additionally link your usage to your account by sending your display name and email to our self-hosted Rybbit, so we can measure retention and improve the course for real learners (Rybbit stores a user identifier for this in your browser’s local storage). This signed-in, identified analytics loads only after you choose “Allow”; if you learn signed-out, or after you sign out, analytics is anonymous again.

Legal basis (signed-in app): your consent — you can withdraw at any time from the banner or footer.

What we do not do

• We do not sell or rent your personal data — ever.
• We do not run third-party advertising or ad-tracking pixels.
• We do not collect payment data (there is currently no paid plan).

Who we share data with (processors)

We share data only with service providers that help us run Selgeks, under appropriate agreements:

• Hosting provider — to operate the website, app and database.
• Google — only if you use Google sign-in.
• Anthropic — to generate AI feedback on writing exercises (your submitted answer text only).
• TartuNLP — to generate Estonian audio from lesson text.
• Rybbit (self-hosted) — our own analytics software running on our infrastructure (in the app, this includes your name and email while you are signed in); no third-party analytics company receives your data.

International data transfers

Some of our processors are based outside the European Economic Area (for example Anthropic and Google in the United States). Where data is transferred outside the EEA, it is protected by an appropriate safeguard under the GDPR — such as the European Commission’s Standard Contractual Clauses or the providers’ certification under the EU–US Data Privacy Framework.

How long we keep it

We keep your account and progress data for as long as your account exists. If you delete your account, we delete your personal data and progress. Anonymous guest progress remains on your device until you clear it.

Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Port your data — receive it in a portable format.
• Withdraw consent at any time, where processing is based on consent.

You can delete your account and export your data directly in the app’s account settings, or email us at [email protected]. You also have the right to lodge a complaint with your local data protection authority (in Estonia, the Estonian Data Protection Inspectorate).

Children

Selgeks is intended for general audiences and is not directed at children under 16. If you believe a child has provided us personal data, contact us and we will remove it.

Changes to this policy

We may update this policy as the product evolves. We’ll change the “last updated” date above and, for significant changes, provide a clearer notice.

Questions about your privacy? Email [email protected].