Deutschable · Legal

Privacy & Data Security Policy

This policy explains, in plain language, which personal data this website processes, why, and what rights you have. Last updated: 11 November 2026.

Who is responsible
Visiting the website
Cookies, storage and analytics
Your account, courses and progress
Purchases
Newsletter and free ebook
Comments
Contacting us
Videos, quizzes and images
Deutschable Games
Service providers and transfers outside the EU
Your rights

1. Who is responsible

Deutschable (Stephan Brenner, Inhaber)
Kochhannstr. 6, 10249 Berlin, Germany
Email: hello@deutschable.com

We have not appointed a data protection officer because we are not required to.

2. Visiting the website

When you open a page, your browser sends technical data to our hosting provider (Lovable): IP address, date and time, page requested, browser and operating system, and the referring page. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Technical error reports are kept for up to 90 days and do not include your name or email address.

To show prices in the right currency we estimate your country from your connection. The IP address is not stored for this.

3. Cookies, storage and analytics

Essential storage (no consent needed). We store a few small items in your browser that the site needs to work: your sign-in session, your cookie choice, your analytics opt-out, the last course you opened, popup frequency, and your currency setting. They stay until you sign out or clear your browser data.

Matomo (cookieless visit statistics). We count visits with Matomo Cloud (InnoCraft Ltd., New Zealand; data hosted in the EU). Matomo runs without cookies, shortens your IP address, respects "Do Not Track", and cannot recognize you across visits. Legal basis: our interest in understanding how the site is used (Art. 6(1)(f) GDPR, § 25(2) TDDDG). You can switch it off below.

Microsoft Clarity (only with your consent). If you click "Accept" in the cookie banner, we load Microsoft Clarity (Microsoft Ireland Operations Ltd.), which uses cookies to record anonymized clicks, scrolling and page interactions so we can find usability problems. Without your consent it is never loaded. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). If you click "Decline", nothing changes about how the site works.

Your choices:

You can also reopen the banner any time with "Cookie settings" in the footer.

4. Your account, courses and progress

To sign in we use your email address and send you a sign-in link or code (no passwords). We store your email address, which courses you can access and until when, which lessons you finished, and the last lesson you opened, so your progress follows you across devices. If you bought courses on our old website, we carried over your access and completed lessons, matched by email address. Legal basis: providing the service you signed up for (Art. 6(1)(b) GDPR). We keep this while your account exists; write to us to have it deleted.

Your account data is stored with our hosting and database provider (Lovable and its infrastructure partners). Sign-in emails are sent through our email service on notify.deutschable.com.

5. Purchases

Payments are handled by ThriveCart (ThriveCart LLC, USA) together with its payment providers (for example Stripe and PayPal). We never see your full card details. ThriveCart tells us your name, email address, product, order number and whether a purchase was refunded, so we can give you access. Legal basis: performing the contract (Art. 6(1)(b) GDPR) and tax law (Art. 6(1)(c) GDPR). Invoices and order records are kept for the periods required by German tax law (up to 10 years).

If you buy a course, we also tell our separate game site, deutschable.games, your email address so it can include the Deutschable Games web app in your purchase.

If you sign up for the free ebook, the newsletter or the placement test results, we first send you a confirmation email. Only after you click the link do we add your name and email address to ActiveCampaign (ActiveCampaign LLC, USA), our email marketing tool, with tags such as which form you used or your test level. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe with the link in every email; we then stop sending you marketing emails.

When you create an account or write a comment, we may also add your email address to ActiveCampaign so we can send you course-related tips; you can unsubscribe at any time.

7. Comments

Under lessons and blog articles you can write comments. We store your comment, the name you show, your email address and the date. Comments are only published after we approve them; your email address is never shown. You can ask us to delete your comments at any time. Legal basis: Art. 6(1)(b) and (f) GDPR.

8. Contacting us

If you email us or use the contact form, the company training inquiry or the withdrawal form, we receive your name, email address and message in our Google Workspace mailbox (Google Ireland Ltd.) and use them only to answer you. We delete messages when they are no longer needed, unless we must keep them for legal reasons.

9. Videos, quizzes and images

Lesson videos are hosted by Vimeo (Vimeo.com, Inc., USA). The player is loaded only when you open a lesson and is set to "do not track", so Vimeo does not use it for analytics or advertising. Vimeo still receives your IP address and technical data needed to stream the video. Quizzes and many images are served by Bunny.net (BunnyWay d.o.o., Slovenia), which receives your IP address to deliver the files. Legal basis: providing the lessons (Art. 6(1)(b) and (f) GDPR).

10. Deutschable Games

deutschable.games is a separate website with its own account system. If you sign up there, it tells us your email address so you get free access to the 1000 Nouns course here. Leaderboard rules are in our Terms.

11. Service providers and transfers outside the EU

We don't sell your data. We share it only with the service providers named above, who process it on our behalf under data processing agreements, and with authorities where the law requires it. Some providers are based in the USA (ThriveCart, ActiveCampaign, Vimeo, Microsoft, Google). Transfers are protected by the EU-US Data Privacy Framework where the provider is certified, and otherwise by the EU Standard Contractual Clauses.

Links to Trustpilot, the app stores or other sites are normal links; nothing is sent to them until you click.

12. Your rights

You have the right to access your data, have it corrected or deleted, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interests (Art. 15-21 GDPR). You can withdraw any consent at any time, with effect for the future. Just write to hello@deutschable.com.

You also have the right to complain to a data protection authority, for example the one responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.