Privacy policy
Last updated 16 October 2026
1. Who is responsible for your data
LUNAR INTERACTIVE ARTS LTD, registered in England and Wales with company number 12044811, is the data controller for this site. Registered office: 102 Lady Margaret Road, Flat D, London, England, N19 5EX. For anything about your data, email [email protected].
2. The short version
Without an account, this site stores nothing about you on a server: your progress lives in your own browser's local storage. If you create a free account, we store your email address and your learning progress, in Ireland, so your progress follows you between devices (section 7). There are no passwords, no advertising and no tracking cookies.
3. What your browser keeps
The site saves your progress in your browser's local storage so it is there next time. This is not a cookie. Without an account it is not sent to us and we cannot see it; when you are signed in, the same progress is also saved to your account (section 7). It holds:
| Name | What it holds |
|---|---|
| lso_course_v1 | Which lesson days you have finished, and the days you studied, for your streak |
| lso_xp_v1 | Your XP total and rank |
| lso_cards_v1, lso_cards_meta_v1 | Your review deck and its schedule |
| lso_quizpaid_v1 | Which quiz answers have already earned XP, so they are not counted twice |
| lso_prefs_v1 | Whether you prefer Latin American or Spain Spanish |
| lso_achievements_v1 | Which achievements you have earned, and the day you earned each one |
| lso_stats_v1 | Counts the achievements need: quizzes passed without a mistake, review cards answered, and word game rounds finished |
You can delete all of it by clearing this site's data in your browser settings. Without an account we have no copy. With one, see section 7 to delete the copy in your account.
When you sign in, a few more things are kept so signing in works:
| Name | What it holds |
|---|---|
| lso-auth | Your sign-in, in local storage, so you stay signed in on this device until you sign out |
| lso_plan | Your plan (free, Pro or Lifetime), in local storage, so the course page shows what is open to you |
| lso_next | The page to take you back to after signing in, removed once you are signed in |
| lso_sync_pulled, lso_sync_pushed, lso_gate_ | In session storage, gone when you close the tab: when your progress was last fetched and saved, and when a lesson was last opened for you, so the site does not repeat work |
| lso_at | A cookie, set only while you are signed in. It carries proof of your sign-in to our server so it can give you the lessons your account opens, and lasts an hour at most before it is renewed. It is strictly necessary for the service you asked for, so it needs no consent, and it is never used to track you. |
4. Analytics
We use Cloudflare Web Analytics to count visits and see which pages are read. It uses no cookies, does not build a profile of you, and does not follow you to other sites. We see totals, not individuals.
We also use Ahrefs Web Analytics, for the same purpose and on the same terms: it sets no cookies, collects no personal data, and shows us totals, not individuals. Your browser loads its script from Ahrefs, so Ahrefs receives your IP address in order to send it, as Google does for the font.
If we ever add an analytics tool that uses cookies, we will ask for your consent first and update this page before switching it on.
5. Hosting, and fonts
The site is hosted by Cloudflare. Like any web host, Cloudflare processes your IP address and basic request details in order to deliver pages and protect the site from attacks. That processing is short-lived and is covered by Cloudflare's own data processing terms. Cloudflare also tells the page which country you are in, so that prices show in your currency; that country is not stored.
The site's font, Nunito, is loaded from Google Fonts, so your browser asks Google for it and Google receives your IP address to send it. Google is used for fonts only, and for nothing else on this site.
6. If you email us
We keep the email and our reply so we can deal with what you asked, and delete it within two years unless it relates to a purchase, in which case we keep it for as long as the law requires us to keep records of sales, currently six years in the UK.
7. Accounts and payments
Accounts are open.
Signing in. You sign in with a link we email you, or the one-time code in the same email. There are no passwords. We hold your email address, and your synced progress so it follows you between devices. Both are stored by Supabase in Ireland, in the European Union. Supabase also keeps a short log of sign-ins, including the IP address, to protect accounts from misuse.
How long we keep it. Until you delete your account. Email [email protected] from the address you sign in with and we delete the account and everything in it within 30 days, and confirm when it is done. Records of a purchase are kept as section 6 describes.
Payments go through Stripe Managed Payments. Link, Stripe's checkout (called Onelink in the UK), is the seller of record: it takes your payment and holds your payment details, and its own privacy policy covers that. We receive only what we need to give you access, such as which plan you have and when it renews.
The services we use, each acting on our instructions under a data processing agreement: Cloudflare for hosting; Supabase for accounts and synced progress; Stripe for payments; Resend to send sign-in emails and, only if you ask for it, a newsletter; and Google, for fonts only. Ahrefs counts visits, as section 4 describes.
8. Marketing email
We send none. If we start a newsletter, joining it will be a separate box that is unticked unless you tick it, never bundled with accepting these terms, and every email will carry an unsubscribe link that works straight away.
9. Children
The site is not aimed at children under 13, and accounts will not be offered to them. If you believe a child under 13 has given us personal data, tell us and we will delete it.
10. Where data is processed
Accounts and synced progress are stored in Ireland, in the European Union. UK data protection law recognises the EU as giving personal data adequate protection, so no further safeguards are needed for that, and for readers in the EU the data never leaves the EU.
The other services in sections 5 and 7 may process data elsewhere, outside the UK. Where they do, the transfer is protected by the UK's adequacy regulations or by standard contractual clauses.
11. Your rights
Under UK data protection law you can ask what we hold about you, ask us to correct it or delete it, object to how we use it, and ask for a copy you can take elsewhere. Email [email protected]. We will reply within a month.
If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first, so we can put it right.
12. Changes
If this policy changes, the date at the top changes with it. Anything that affects how we use data you have already given us will be emailed to you before it applies.