Privacy Policy
Last updated 2026-10-10.
Ladu is a vocabulary manager built and run by a single developer. This page describes what information Ladu collects, why, and how you can have it removed.
Who is responsible
The person responsible for your data (the "controller" under the EU General Data Protection Regulation) is:
Kevin Raud
04155 Leipzig
Germany
Email: [email protected]
What we collect
Account information. Your name, username, email address, and the languages you tell us you speak. If you sign up with a password, we store a salted hash of it — never the password itself. If you sign in with Google, we store your Google account's unique identifier and the email address Google confirms for it, instead of a password.
Your vocabulary data. The words, translations, and grammatical details you add, and your practice history — this is what powers the app's spaced-repetition exercises and stays tied to your account.
Sign-in activity. Each time you sign in, we record the time, whether you used a password or Google, and the country the request came from. We do not store your IP address. We also note, at most once an hour, when you were last active, and we keep one entry for each day on which you used the app (the day only, not what you did) so we can count how many people use Ladu. The list of sign-ins is deleted after 90 days, and the daily entries after 400 days.
Basic technical data. Error reports (via Sentry) when something breaks, so it can be fixed — these can include the page you were on and what went wrong, not your vocabulary content.
Why we may use it
To give you an account and run the exercises, we use your data to carry out our agreement with you (Article 6(1)(b) GDPR). To keep Ladu safe, to fix errors, and to count how many people use it, we rely on our legitimate interest in running a secure and working service (Article 6(1)(f) GDPR). You can object to that use (see "Your rights").
What we don't do
We don't sell or rent your data to anyone. We don't run advertising, and we don't use tracking cookies or third-party analytics to profile you across other sites.
Who else sees it
A short list, each used only for the specific job named:
- Google — only if you choose "Sign in with Google," to verify your identity.
- Resend — to deliver account emails (verification, notifications).
- Sentry — to report application errors, as described above.
- Cloudflare — sits in front of our server for security and performance; it can see traffic metadata, not your account data.
A small number of Ladu staff can open an internal support tool to look at an account when you ask for help: your profile, sign-in activity, and how many words and tags you have — not the words themselves. They can suspend or delete accounts. Every action they take is written to a log.
Some of these providers are based in the United States, or may process data there. For such transfers we rely on the EU-approved safeguards that the provider offers, such as standard contractual clauses.
Cookies and similar storage
Ladu uses no advertising or tracking cookies and no third-party analytics. It does keep a small amount of data in your browser. Each item below is needed to run the service, or remembers a choice you made. Because of this, we do not ask for your consent for them. In the EU, the other EEA states and the UK, the site shows a short notice about this. If we add anything optional later, we will ask first and list it here.
| Name | Kind and place | What it holds and why | How long |
|---|---|---|---|
ladu.session |
Local storage, app | Your sign-in token and basic account details (such as your name and username). It keeps you signed in. | Until you sign out. The token stops working after 30 days. |
__Host-ladu_oauth |
Cookie, app | A signed value that protects a Google sign-in from forgery. Set only when you start a Google sign-in. | 10 minutes. |
ladu.theme |
Local storage, site and app | Your choice of light or dark theme. | Until you clear your browser data. |
i18nextLng |
Local storage, site and app | Your choice of interface language. | Until you clear your browser data. |
ladu.practice.params |
Local storage, app | The settings of your last practice, so the next one starts the same way. | Until you clear your browser data. |
ladu.practice.session |
Session storage, app | The practice session that is running, so a page reload does not lose it. | Until you close the tab or sign out. |
ladu.notice.v1 |
Local storage, site | That you closed the storage notice, so it does not show again. | Until you clear your browser data. |
You can delete all of this in your browser settings. The app then asks you to sign in again and forgets your choices.
How long we keep it
We keep your data for as long as your account exists. You can ask for your account and all associated data to be deleted at any time by contacting us at the address below. A deleted account is hidden at once and can be restored for 30 days, in case of a mistake; after that, it and all its data are removed for good. If you need it gone sooner, say so in your request and we'll remove it right away. We'll confirm once it's done.
Children's privacy
Ladu is not directed at children under 13, and we don't knowingly collect data from them. If you are under 16, you need the permission of a parent or guardian to use Ladu. If we learn that a child under 13 has an account, we delete it.
Your rights
Under the GDPR you can ask us for access to your data, to correct it, to delete it, to limit how we use it, and to receive it in a common format. You can object to uses that rely on our legitimate interest. Send your request to the address below.
You can also complain to a data protection authority, for example in the country where you live, or in Germany (Saxony), where we are based.
Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top of this page.
Contact
Questions, or a deletion request? Email [email protected].