Privacy Policy
Last updated: September 2026
Who Is Responsible
The controller for your personal data is Максим Фидлер (Maxim Fiedler), 8217 Aheloy, Burgas Province, Bulgaria, legal@bulgarian.dev.
Overview
You can use the whole course without an account. Your progress then lives only in your browser. Signing in with Discord is optional and lets you sync progress, add friends, appear on the leaderboard, claim certificates, and contribute voice recordings. We do not sell your data, show ads, or use analytics or tracking tools.
Without an Account
Your progress (lessons, coins, streaks, settings) is saved in your browser's local storage and is not sent to us. You can clear it at any time in your browser settings.
Like every website, our hosting provider (Vercel) processes your IP address and basic request details to deliver the pages and keep the service secure. These logs are kept for a short time and are not used to identify you.
Signing In With Discord
Videos on the Watch pages are embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com); YouTube receives your IP address and player activity when you press play. When you sign in, Discord shares your Discord user ID, username, display name, avatar, and the list of servers you are in. From that list we keep only whether you are in the few servers that unlock special topics. We never receive your email address or password. We store these together with a username you can change, your synced progress (lessons, coins, streaks, quests, daily coin history), and Discord access tokens. We use the tokens only to refresh your name and avatar every few hours, so your profile stays current.
A single essential cookie keeps you signed in. Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR).
Public Profile, Friends, and Leaderboard
Signed-in players have a public profile at /u/username showing their username, avatar, join date, coins earned, and streak. The same details appear on the public leaderboards and to your friends. Friend requests are sent by username. If you team up with a friend for the weekly friend quest, we store who you picked, and you both see each other's coins earned that week. Weekly leagues group players by the coins they earned the week before.
Speaking Exercises
Speaking exercises use your microphone only while you press the record button. To check what you said, the audio is transcribed by one of these services, depending on your browser:
- your browser's built-in speech recognition (for example Google in Chrome, Apple in Safari);
- Speechmatics, in its EU region;
- Groq, as a fallback on some devices.
We do not store this audio or the transcripts, and we do not send your name or account with them. Legal basis: performance of our agreement with you, because you started the exercise.
Voice Studio Recordings
If you contribute recordings in the voice studio, we store the audio on our own file server together with your account ID, your username, and the date. Approved recordings play in the lessons for everyone, with your username shown as the speaker. You accept the voice contribution terms before your first recording, and we store when you accepted them.
Legal basis: performance of the contribution agreement you accepted (Art. 6(1)(b) GDPR). Unreviewed recordings are deleted when you delete your account. Approved recordings are kept for as long as they are used in the course, with your username and account ID removed.
You can still contact us about your recordings at any time. We will handle every request according to the GDPR.
Certificates
When you claim a certificate, we store the name you enter, the certificate details, and the signed PDF. Anyone with the certificate link or ID can view the name and details, so employers and others can check it is real. Certificates are deleted when you delete your account, and their links then stop working.
Text-to-Speech
Some lessons generate pronunciation audio with Google Cloud Text-to-Speech. Only lesson text is sent, never anything about you.
Cookies and Local Storage
We use one essential session cookie when you sign in, and local storage for your progress and settings. Both are strictly necessary for features you ask for, so no consent banner is needed. We do not use tracking, analytics, or advertising cookies, and our font is served from our own domain.
Who Processes Data for Us
- Vercel: website hosting.
- Our database provider: stores accounts, progress, certificates, and recording details.
- Discord: sign-in.
- Speechmatics, Groq, and your browser's provider: speech recognition.
- Google: text-to-speech (lesson text only).
Some of these providers are based outside the EU, mainly in the United States. Those transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Deleting Your Account
You can delete your account at any time from your profile page. This immediately deletes your account, synced progress, Discord tokens, friends, certificates, and unreviewed recordings, and removes your name from approved recordings. Progress stored only in a browser's local storage is not affected.
Children
The course is suitable for all ages without an account. Accounts are not meant for children under 14, the age of digital consent in Bulgaria. Contributing voice recordings requires being 18, or permission from a parent or guardian.
Your Rights
Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to its processing. Email legal@bulgarian.dev and we will reply within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the data protection authority in your country.
Changes to This Policy
We may update this policy as the service changes and will update the date above when we do.
Contact
Максим Фидлер (Maxim Fiedler), software developer
8217 Aheloy, Burgas Province, Bulgaria
Email: legal@bulgarian.dev
The full postal address is available on request by email.