Privacy policy

10 Sentences (10sentences.com) is a website for learning German vocabulary. This page explains what personal data we collect, why, who handles it for us, and what you can ask of us.

Who is responsible

Muhammad Ramish
Email: [email protected]

Write to this address about anything on this page, including the requests listed under “Your rights”.

What we collect and why

Your account

When you sign in with Google, we receive your name, email address and profile picture from Google. When you sign in with an email link, we receive your email address. We use these to create your account, keep you signed in and show your name where you choose to appear. Legal basis: providing the service you signed up for (Art. 6(1)(b) GDPR).

Your learning

We save what you do on the site so you can continue where you left off: the sentences and answers you write, the corrections and scores they receive, your flashcard and revision progress, your learning plan, your streak, and any reports you send us about an exercise. Legal basis: providing the service (Art. 6(1)(b) GDPR).

Pro

If you subscribe to Pro, Polar (polar.sh) sells the subscription to you as our reseller: it collects your payment details, billing address and email address, and is responsible for them under its own privacy policy. We never see your card details. We receive from Polar whether you have a subscription, which plan it is, until when it runs and Polar’s customer number for you, and we keep when your free week ends. Legal basis: providing the service (Art. 6(1)(b) GDPR).

If you subscribe in our Android app, Google Play handles the purchase and your payment details, and is responsible for them under Google’s privacy policy. We give Google a one-way code made from your account number, so the purchase stays with your account. We receive from Google a purchase token, which plan it is, its status, until when it runs and whether it renews. Legal basis: providing the service (Art. 6(1)(b) GDPR).

Chats

If you use the chat, we save the profile you fill in (city, level, job and hobbies) and your messages. If you choose “Use my location”, your position is rounded to about 10 km to place you on the globe. Rounded this way, it can’t locate you precisely. Some chat partners are AI and others are real learners. AI partners are marked “AI”, except during a “Bot or not?” competition, when the chat says that some partners are AI. If you report a chat, we save your reason and the chat’s latest messages, send them to our own inbox by email, and read them to decide what to do. Legal basis: providing the service (Art. 6(1)(b) GDPR); for reports, our legitimate interest in keeping the chat safe (Art. 6(1)(f) GDPR).

What other learners see

The leaderboard and the chats show your first name and the first letter of your last name (for example “Anna S.”). Once you’ve filled in your chat profile, other learners can also see your city, level, job and hobbies, and your pin on the globe. Your email address is never shown to anyone.

Emails

We send sign-in links when you ask for them; during your free week, three emails about it (on days 1, 3 and 6, with what you’ve learned so far and, on day 6, that the week ends the next day); and now and then an email about new features of the site. You can stop the free-week and feature emails at any time: untick “Email me about new features” in Settings (your picture at the top of the site), use the unsubscribe link at the bottom of any of them, or reply “unsubscribe”. Legal basis: providing the service for sign-in links (Art. 6(1)(b) GDPR); our legitimate interest in telling you about the service you signed up for, for the free-week and feature emails (Art. 6(1)(f) GDPR).

Where you came from

If you arrive through a creator’s or a campaign’s link (an address starting 10sentences.com/r/), we count the click, without anything that identifies you, and remember the link in a cookie for 30 days. If you create an account in that time, we note on it which link you came through, so we know which creators and campaigns bring learners. Legal basis: our legitimate interest in knowing how people find the site (Art. 6(1)(f) GDPR).

Analytics

If you choose “Accept all” when we ask about cookies, we use Google Analytics to count visits and see which pages are used. Google Analytics sets cookies (named _ga…) and receives your IP address, your browser and device type, and the pages you view. If you choose “Only necessary”, it isn’t loaded. You can change your choice at any time with “Cookie settings” at the bottom of the home page. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25 TDDDG).

Our iPhone and Android apps don’t use Google Analytics, so they don’t ask about cookies.

Advertising (Meta)

If you choose “Accept all”, we use the Meta Pixel from Meta Platforms Ireland Ltd. to measure our ads on Facebook and Instagram: which ads bring visitors, new accounts and Pro subscriptions. The Pixel sets cookies (named _fbp and _fbc) and sends Meta the pages you view, your IP address and your browser. When you create an account or subscribe to Pro, our server tells Meta too, with your email address and account id in hashed (scrambled) form, so Meta can match it to an ad you clicked. If you choose “Only necessary”, none of this happens. You can withdraw your consent at any time with “Cookie settings” at the bottom of the home page. For collecting and passing on this data, we and Meta are jointly responsible (Art. 26 GDPR); what Meta does with it is described in Meta’s privacy policy (facebook.com/privacy/policy). Legal basis: your consent (Art. 6(1)(a) GDPR, § 25 TDDDG). In our iPhone and Android apps, none of this happens: the Pixel isn’t loaded there, and our server doesn’t tell Meta about you.

Technical logs

Our hosting provider records technical information for each request, such as your IP address and the time. We use it to keep the site running and secure. Legal basis: our legitimate interest in a working, secure site (Art. 6(1)(f) GDPR).

Cookies and storage in your browser

• A sign-in cookie that keeps you signed in. It’s needed for your account to work.
• A cookie that remembers your choice between learning to recognise words and learning to use them.
• If you came through a creator’s or a campaign’s link, a cookie that remembers which one, for 30 days.
• Small notes in your browser’s storage, such as where you stopped in a story or an exercise. They stay on your device.
• A cookie that remembers your choice in the cookie banner.
• Google Analytics and Meta Pixel cookies, only with “Accept all”, as described above.
• YouTube clips play in YouTube’s privacy-enhanced mode. Once you play one, YouTube may set its own cookies and receive your IP address.

Who processes data for us

We use these services to run the site. They only get the data they need for their part. You can ask us which companies they are.

• A hosting provider runs the site and its database.
• Google provides “Sign in with Google”, Google Analytics and the YouTube player for the video clips.
• An email service sends our emails (sign-in links, feature emails and chat reports to our own inbox).
• Meta measures our Facebook and Instagram ads, only with “Accept all”, as described above.
• AI model providers check your sentences, write the chat partners’ replies and translate the video sentences. For this they receive the text you write and, in chats, your first name, your chat profile and the words you’ve been learning. Your email address is not sent.
• OpenStreetMap’s map service turns your position, rounded to about 1 km, into a city name, only when you choose “Use my location” in the chat.
• An audio host stores the stories, which play from its servers.
• Our reseller for Pro subscriptions handles their payments, as described above. For this it receives your account id and email address from us.

Some of these companies are based in the United States, so your data may be processed there. Where that happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

How long we keep it

We keep your account and learning data for as long as you have an account. You can delete your account yourself in Settings (your picture or initial at the top of the page): it’s deleted at once, with your progress, chats and chat profile, and a Pro subscription is cancelled. If you ask us to delete it, we do so, usually within 30 days (the steps: delete your account). Google Analytics deletes its data automatically after the retention period set in our Google Analytics account (2 or 14 months). Technical logs are kept by our hosting provider for a short time.

Your rights

Under the GDPR you can ask us to:

• tell you what data we have about you and give you a copy;
• correct data that’s wrong;
• delete your data and your account;
• limit how we use your data, or give it to you in a format you can take elsewhere;
• stop using your data where we rely on our legitimate interest (you can object to this at any time).

Where you gave consent, you can withdraw it at any time. To use any of these rights, email [email protected]. You can also complain to a data protection authority, for example the one in the country where you live.

Children

10 Sentences is meant for people aged 16 and over.

Changes

If we change how we handle your data, we’ll update this page and the date at the top. See also our terms of service.