Privacy

Version 0.3 · public preview · last updated 2026-10-16

The short version

Using this site without an account collects no personal data at all. No cookies, no trackers, no third-party scripts. We do keep one anonymous count of pages opened, described below, which cannot say who read what. Signing in (optional, for cross-device sync) adds your email address, your learning progress and a short record of when you signed in to our database — nothing more.

What we count, and what we cannot see

When a page opens, the site sends one small note to our own server: the page's address, whether you are on a phone, tablet or computer, the country the request came from (supplied by our host, not looked up by us), and, if you arrived through a Lrnon share link, which channel it was. That is added to a daily total. No cookie, no identifier, no IP address and no browser string is stored, so the totals cannot be traced back to a person and cannot say how many different people there were. It is not sent at all if your browser sends Do Not Track or Global Privacy Control, and not from the admin area. We use the totals to see which lessons are read and where people arrive from.

Where your progress lives

By default, your lessons, XP, streaks, badges, and flashcard schedule are stored in your browser's local storage, on your device. We can't see them. Clearing your browser data deletes them; that is entirely in your hands. "Make available offline" stores lesson copies in your browser's cache the same way.

Accounts and sign-in (optional)

Signing in — via Google, GitHub, or an emailed sign-in link — lets your progress follow you across devices. Nothing about this is required to use the site.

If you sign in, we store: your email address, your display name (if you choose to set one), and your learning progress (lessons completed, XP/coin events, streak data). Your existing local progress merges in automatically the first time you sign in; nothing is lost or overwritten.

Each time you sign in we also record the time, which provider you used and whether the device was a phone, tablet or computer. No address and no browser string. Administrators with the right role can see this, with your display name, in the user portal, so they can help you if something goes wrong; they cannot see your email unless they are an owner. These records are deleted after 24 months, and when you delete your account.

Everything an administrator does to an account (a suspension, a role) is written to a log that no one can edit, with their name and the reason.

We don't store passwords — sign-in works entirely through your chosen provider (Google/GitHub) or a one-time emailed link, so there's no password of ours to leak. Your data is protected by database-level row-level security: only you (and, for support purposes, project administrators) can read your account's data — no one else, including other signed-in learners, can see it. Progress can only be written through a single, restricted server-side function; there is no direct write path into your XP or progress records.

We never sell your data or share it with advertisers, and there are no ad networks or third-party trackers on this site. Lrnon is open to advertising under strict rules (see the support page), and shows none today. If it ever does, an advertisement will be a labelled line of text or an image kept on this site, with a plain link: no tracking, no cookies and no personalising, for anyone. This page will say so before it starts.

The leaderboard is opt-in. If you join it, other learners see a generated handle (never your name or email), your level and your streak, and nothing else; you can leave at any time. The practice pals that fill the board with you are made-up, each marked "Practice pal", and are never counted as learners. They hold no data about anyone.

Sky the study buddy reads the progress already stored in your browser and sends nothing about you anywhere; the leaderboard it shows is read from our server and tells it nothing about you. The part of Sky that answers written questions is open only to the Lrnon team for now. When it is used, the question is sent to an outside AI provider to write the answer. That provider's terms differ by plan: on a free plan its published terms allow it to use what is sent to improve its products and to have people read it, and on a paid plan they do not. Lrnon has not confirmed which applies, so please assume the first and do not type personal details into a question.

Want your data exported or deleted? Open an issue on the project repository (see Contact below) and we'll handle it directly.

Age — learning is open to everyone

There is no minimum age to learn here. Lrnon is education, and education should not be gated by age. Lessons, quizzes, XP, streaks, badges and the daily review are open to anyone, in any region, subject to whatever local law applies where you are.

The most important thing to understand is that learning anonymously involves no personal data at all. Without an account we hold nothing about you: your progress is in your own browser's storage, we cannot see it, and there is nothing to consent to because there is nothing being processed. That is the default, and for a young learner it is the whole experience — an account only adds cross-device sync.

If you are under 18 and want an account, or to volunteer

Signing in, or volunteering, means we process personal data — an email address at minimum. Where the person is a child, the law requires consent from a parent or guardian first. India's DPDP Act treats everyone under 18 as a child and requires verifiable parental consent; the GDPR sets a lower floor (13–16 depending on the country) and the US COPPA rule covers under-13s. Which one applies depends on where you live, so we apply whichever is stricter for you.

How it works, in practice:

1. Tell us you are under 18, and give us a parent or guardian's email — not theirs to be published, only to be asked.
2. We email them directly, explaining exactly what you would be doing and what we would hold.
3. They reply to confirm. A reply from the guardian's own address is the consent record — not a checkbox you tick on their behalf.
4. Only then does the account or the volunteer task go ahead.

We record the guardian's confirmation, its date and the policy version in force. That record is visible only to project administrators, never published, and deleted when the account is closed or the task ends. A guardian can withdraw consent at any time by emailing us, and we act on it immediately — no reason required and no persuasion attempted.

While consent is pending we hold only what is needed to ask for it. If it never arrives, we delete that too. For volunteers under 18 we also never publish your name or contact details, even with consent.

Your rights over your data

If you have an account you can, at any time:

• See it — everything we hold is your email, display name, learning progress and sign-in record. There is no hidden profile.
• Delete it — deleting your account removes your profile, progress, XP ledger and any roles, immediately and completely.
• Withdraw consent — signing out and deleting your account returns you to anonymous use, with your local progress intact.

Administrative records of role changes are kept for accountability and cannot be edited by anyone, including us. Deleting your account unlinks you from those records rather than rewriting them, so the history stays honest without staying personal.

Hosting

The site is served by a content delivery network, which processes IP addresses transiently to deliver pages and protect against abuse, as all web hosting does. We run no server-side logging of our own beyond what's described above.

Contact

Questions or concerns: open an issue on the project repository — everything about this project happens in the open.