Privacy Policy

1. Information We Collect

We collect information you provide directly, including:

• Account data: username, password hash, optional email.
• Security data: hashed recovery key, login security metadata (such as failed login counters and temporary lock status).
• Learning data: lexicons, folders, units, words, examples, etymology, tags, likes, saves, shared/imported lexicon data.
• Progress data: study activity, streaks, points, achievements, game progress and attempts (including Wordle attempts).
• Preference data: theme choice, sound settings, and related dashboard preferences stored in browser/local storage.

2. How We Use Information

We use your information to:

• Provide core features (authentication, lexicon creation, study modes, game progress, and printing features).
• Secure accounts and systems (fraud prevention, abuse prevention, lockout/rate-limit controls, CSRF/session protection).
• Maintain and improve service quality (debugging, reliability, performance tuning, moderation).
• Communicate service or policy updates when required.

3. Legal Basis (Where Applicable)

Where data protection laws require a legal basis, we process data for contract performance (providing Verba), legitimate interests (security, abuse prevention, service reliability), and legal compliance.

4. Recovery Key and Account Security

Recovery keys are shown to you at generation time and stored only as secure hashes. We cannot retrieve your plain recovery key. If you lose both password and recovery key, account recovery may not be possible.

5. Sharing and Public Content

If you publish or share lexicons, related content may be visible to other users. Shared link imports may copy lexicon content into another user's private account. Public/discovery content should not include sensitive personal data.

6. Cookies and Session Data

Verba uses essential cookies/session storage to keep you logged in and protect account actions. Disabling essential cookies may prevent normal operation.

7. Data Retention

We retain account and content data while your account remains active and as needed for security, abuse prevention, backup integrity, and legal obligations. Cached or backup copies may persist for a limited period after deletion requests.

8. Data Deletion and Your Rights

Subject to applicable law, you may request access, correction, export, or deletion of your account data. You may also delete content you own inside Verba. Some records may be retained when required for legal, security, or fraud-prevention purposes.

9. International Processing

Your information may be processed in the country where Verba is operated and where hosting infrastructure is located. By using Verba, you acknowledge this processing.

10. Children and Minors

If you are under the age required by your local law to independently consent, use Verba only with parent/guardian or school authorization as required by law.

11. Security Measures

We apply reasonable administrative, technical, and organizational measures (including hashed credentials, session controls, and access checks). No system is completely secure, and absolute security cannot be guaranteed.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be reflected by updating the "Last Updated" date and, where required, by additional notice.

13. Contact

For privacy requests or questions, contact: [email protected].