Privacy policy

Data controller

The data controller is the publisher of the site, described in the Legal notice.

For any question about your data, write to [email protected].

Data processed

Depending on how you use the site, we process the following data:

• Account: email address, username, language, time zone, start-of-day hour, creation date.
• Profile, optional: your situation (for example secondary school pupil, student, teacher, institution; not an exhaustive list). You can change or remove it at any time. It is used to tailor content and to produce aggregate statistics; it is never sold or shown to other users.
• Google or Discord sign-in: identifier assigned by the provider and email address.
• Learning: vocabulary cards, review history (including review duration), bookmarks, work subscriptions, settings.
• Leaderboard: your username and your number of reviews appear publicly in the leaderboard. You can withdraw from it at any time on the leaderboard page.
• Security: browser associated with each session; email address and IP address of sign-in attempts, deleted after 24 hours.
• Feedback: message type, message, email address if you provide it, page you are writing from.
• Technical errors: error reports from the site and the API, sent to Sentry, hosted in the European Union, without session recording and without keeping the IP address.

Legal bases

• Performance of a contract: creating and running your account.
• Legitimate interest: site security, abuse prevention, error monitoring, aggregate statistics.
• Consent: optional profile.

Recipients

Your data is neither sold nor rented. It is shared only with the following providers:

• the site’s host (OVH SAS);
• Resend, to send the sign-in code by email (United States; transfer covered by the Data Privacy Framework or by the European Commission’s standard contractual clauses);
• Google and Discord, if you choose to sign in with them;
• Sentry, for error reports (data hosted in the European Union);
• Google Fonts: when the fonts load, your IP address is sent to Google.

Retention periods

• Account and learning data: until the account is deleted.
• Sessions: 30 days.
• Sign-in attempts: 24 hours.
• Feedback messages: 2 years.

Cookies and local storage

Claron uses a single, technical cookie: claron_oauth, valid for 10 minutes, during a sign-in with Google or Discord.

The browser’s local storage keeps your session, your language, your reading settings without an account and your recent searches.

These items are strictly necessary for the site to work: they do not require your consent, hence the absence of a banner. Claron shows no advertising and does no tracking.

Your rights

You have the right to access, rectify, erase and port your data, to object to its processing and to restrict it.

To exercise these rights, write to [email protected]. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority.

Users under 15

If you are under 15, you must obtain a parent’s consent before creating an account.