Privacy Policy

Introduction

Welcome to LexStud. This Privacy Policy explains what data we collect, how we use it, and the choices you have. We follow the principles of the GDPR and aim to be clear and minimal with data.

Data We Collect

• Account data: email, display name, hashed password.
• Learning data: study progress, JLPT levels, streaks, SRS scheduling and quiz results.
• Technical data: IP address, user agent, and basic logs for security and debugging.
• Contact form data: name, email, and message content when you contact us.

We do not collect payment data at this stage. If subscriptions are added later, this policy will be updated.

Cookies & Consent

LexStud uses essential cookies for security and session management. Analytics cookies are optional and only activated if you consent via our banner. We implement Google Consent Mode v2 with a default of denied. You can change your choice anytime via Cookie settings.

• Necessary (always on): session & security storage.
• Analytics (opt-in): helps us understand usage and improve the platform.

Analytics

We use Google Analytics 4 to understand how LexStud is used. GA4 only stores analytics data when you have granted consent. We enable IP anonymization and respect Consent Mode signals.

Provider: Google Ireland Limited. Data may be processed in the EU and, where applicable, transferred subject to appropriate safeguards.

Legal Bases

• Contract: to provide your account and learning features.
• Legitimate interests: site security, fraud prevention, and basic service analytics in a privacy-preserving way.
• Consent: analytics cookies and related processing.

Data Retention

• Account & learning data: kept while you have an active account.
• Logs: typically 30–90 days, unless required longer for security or legal reasons.
• Contact messages: kept as long as needed to handle your request.

Your Rights (GDPR)

You can request to:

• Access, correct, or delete your personal data
• Export your data (portability)
• Restrict or object to certain processing
• Withdraw consent for analytics at any time

To exercise your rights, see the contact details below.

Sharing & Processors

We do not sell your data. We may share limited data with service providers (processors) who help us run LexStud, under data processing agreements. Examples: hosting, analytics (with consent), email delivery.

Security

We use industry-standard measures such as HTTPS, hashed passwords, access controls, and regular updates. No method is 100% secure, but we work to protect your data.

Contact

For privacy questions or requests, contact us at info@lexstud.com.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices or for legal reasons. If we make material changes, we will notify users by email or in-app notice. The latest version will always be available on this page.