PRIVACY, IN PLAIN ENGLISH

Privacy &
Cookie Policy

This page explains how Mundolexis currently handles personal data, speech recordings, cookies and local browser storage.

Effective and last updated: 3 September 2026

CURRENT STATUS

✓ No advertising cookies
✓ Optional lesson analytics, no cross-site tracking
✓ Speech audio is not stored by Mundolexis
✓ Account deletion is available

THE SHORT VERSION

We use data to provide the lessons you request.

Mundolexis is an early-stage Dutch-language learning service operated in the Netherlands. We collect the information needed to create accounts, remember learning progress, secure the service, send password-reset messages and provide optional pronunciation feedback. We do not currently sell personal data, serve personalised advertising or use analytics cookies.

Mundolexis is the controller for the personal data described on this page. No Data Protection Officer has been appointed at this stage. Privacy questions can be sent to mundolexis@gmail.com.

DATA WE CURRENTLY PROCESS

What we collect and why

ACCOUNT

Profile and sign-in

First and last name, email address, audience type, student status, educational institution when applicable, account dates, and a salted password hash. We do not store your readable password.

LEARNING

Progress

Quiz scores, completed tourist exercises, points, streaks, words practised, language preferences and related activity dates. This lets signed-in users continue where they stopped.

OPTIONAL

Accountability details

If you use an accountability feature, we may process your name, a partner's name and email address, reminder cadence and progress snapshots needed for that feature.

TECHNICAL

Security and operation

Session identifiers, server-generated account IDs, an account-scoped browser cache, IP address and basic request information may be processed to keep the website available and protect it from abuse.

RESTAURANT PARTNERS

Partnership and voucher records

Restaurant applicants provide a restaurant name, street address, contact name and email. Mundolexis records the application status and administrator review. The partner portal supports offer details, voucher codes, claim and expiry dates, redemption dates and pseudonymous visitor identifiers. Approved restaurants see only their own voucher data and aggregate statistics, not guests’ email addresses or individual learning results. Live voucher issuance is not yet enabled.

Purposes and legal bases

We process account and lesson data because it is necessary to provide the service a user requests. We process security, fraud-prevention and limited operational information for our legitimate interest in running a safe and reliable service. Where a user actively starts pronunciation practice, the audio is processed to provide that requested feature. We will ask for consent before introducing non-essential analytics, advertising or similar tracking technologies.

PRONUNCIATION PRACTICE

What happens when you speak

1You recordThe browser captures a short answer.

→

2Deepgram transcribesAudio is securely sent for Dutch speech recognition.

→

3You get feedbackMundolexis compares the transcript with the expected answer.

Mundolexis does not save the audio recording in its database. The current speech request uses Deepgram's model-improvement opt-out setting, meaning opted-out data is retained by Deepgram only for the time needed to process the request. Mundolexis may receive the transcript, confidence values and word-level recognition results to show feedback. Do not include sensitive information in a pronunciation recording.

SERVICE PROVIDERS

Who helps us operate Mundolexis

CloudflareWebsite hosting, database, network security and necessary security cookies.View privacy information ↗ DeepgramOptional Dutch speech-to-text processing for pronunciation feedback.View privacy information ↗ ResendTransactional messages such as password-reset emails.View privacy information ↗ Google FontsDelivery of the typefaces used by the website.View privacy information ↗

These providers may process limited data outside the European Economic Area under their applicable transfer safeguards and contractual terms. Mundolexis does not give these providers permission to use account data for their own advertising.

RETENTION & SECURITY

How long information remains

Account and synced progress: retained while the account exists and removed when the user deletes the account, subject to any overriding legal obligation.
Login sessions: expire after a maximum of 30 days; logging out or resetting a password invalidates relevant sessions.
Password-reset links: expire after one hour and can only be used once.
Device-local progress and preferences: remain until the browser data is cleared or the application removes them.
Provider operational records: may remain for the limited periods described in each provider's own terms and privacy information.

Passwords are transformed using a salted password-derivation function and are not stored in readable form. Authentication cookies are marked Secure and HttpOnly. No internet service can promise absolute security; users should choose a unique password and contact us if they suspect unauthorised account access.

COOKIE POLICY

Necessary cookies and browser storage

Mundolexis uses necessary cookies and browser storage to provide, secure or remember the service. We do not use advertising cookies or analytics cookies. Optional guest lesson analytics are enabled only after you choose to allow them. Your choice is remembered for up to six months.

Name or category	Purpose	Typical duration
`mundolexis_session`	Keeps a registered user signed in. Secure, HttpOnly and SameSite=Lax.	Up to 30 days
`vocabo_session`	Legacy session-cookie name supported during the transition to Mundolexis.	Up to 30 days
`__cf_bm`	Cloudflare bot protection and security. It does not correspond to a Mundolexis account ID.	30 minutes after inactivity
Local browser storage	Remembers theme choice and guest progress, and caches the current account’s learning data. The active account cache is cleared on logout. Legacy browser data may remain until cleared.	Account cache: until logout; guest data and preferences: until cleared
`mundolexis_privacy_choice`	Remembers whether you chose necessary storage only or allowed optional lesson analytics. It does not contain an advertising identifier.	Up to 6 months

Blocking necessary cookies can prevent login, account security or some site features from working. Users can remove cookies and local storage through their browser settings. Future changes to tracking technologies will be reflected in this policy and the consent choices before use.

Optional guest lesson analytics

With your permission, the tourist lesson sends a random page-visit identifier, the steps reached, the last step, activity times and whether you finished, clicked Exit lesson or opened registration to Mundolexis. This helps administrators understand where lessons can be improved. It does not collect your name, email, answers, recordings or transcripts, and is not linked to an account. A visit is not a unique person: reloading creates a new visit. The visit identifier stays in page memory and is separate from the stored privacy choice.

You can decline without affecting the lesson. Use the button below to change your choice; withdrawal stops further collection. Existing observations remain in the report until the retention period ends. The choice expires after six months, after which Mundolexis asks again. Global Privacy Control and Do Not Track requests keep analytics off. Reports include only consenting guests, so they are not a complete count of visitors. Inactivity for 30 minutes is treated as an estimated stopping point, not proof that someone abandoned the lesson.

Visit records are excluded after 30 days and deleted during the next collection or report request. Administrators see aggregated counts only. Short-lived hashed network identifiers are used separately for abuse prevention; raw IP addresses are not stored in the lesson analytics table. No third-party analytics service is used.

YOUR GDPR RIGHTS

You remain in control

Depending on the circumstances, users may ask for access, correction, deletion, restriction, objection or portability of their personal data. Consent can be withdrawn where processing relies on consent. Users can update profile details and permanently delete an account from the account page. A request can also be sent to mundolexis@gmail.com.

Mundolexis may need to verify the requester's identity before acting on a request. Users also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) ↗.

CHILDREN & CHANGES

Who the service is for

Mundolexis is designed for tourists, expats and students and is not directed at children under 16. We do not knowingly create accounts for children under 16 without appropriate parental or guardian involvement.

This page reflects the service as it works on the date shown above. We may update it when features, providers or legal requirements change. Material changes will be explained on this page and the “last updated” date will change.

PRIVACY QUESTION OR REQUEST?

Contact Mundolexis

Email us and describe what you would like us to access, correct or remove.

mundolexis@gmail.com →

Privacy &Cookie Policy