Course privacy

Last updated: 22 October 2026

This notice applies to My Italian course. For the rest of the site the site privacy policy applies. The data controller is Thuis Italiaans, Alessio's sole proprietorship (KVK 42118745). For any question: privacy@thuisitaliaans.com.

Without an account

You can use the free part without signing up. Your progress then stays in your browser, on your device (localStorage): your progress never reaches me.

With an account

If you create an account, we keep what is needed so you find your progress on every device:

• your email address and the name you choose, or the one passed on by the service you sign in with;
• if you sign in with Google, a code that service gives us to recognise you. We never receive your password for that service and see nothing else in your account;
• if you choose a password, only an encrypted fingerprint of it: nobody sees the real password, not even me;
• your progress: chapters done, reviews, mistakes to go over, your goal and your study minutes;
• your level test answers, right or wrong for each question, so we can tell which questions are too easy or too hard;
• for each open sign-in, when it was opened and the type of browser, so you can recognise your devices in your data file.

We do this because you ask for it by creating the account: it is the performance of the service.

The data we receive from Google

If you sign in with Google, Google passes us only three things: your email address, your name and a code that identifies your account (the openid, email and profile scopes). We do not ask for or receive anything else: no Gmail, Drive, contacts or calendar.

We use this data only to sign you in to the course, recognise you next time and write to you about the service. We keep it as long as you have the account; we do not sell it, use it for advertising or share it with anyone. You can remove the permission at any time at myaccount.google.com/permissions and delete your course account from your profile.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you buy the subscription

Payment is handled by Lemon Squeezy, which sells the course on my behalf. Only Lemon Squeezy sees your card details, never me. From Lemon Squeezy I receive the purchase email, your name, your country, the subscription status with its renewal dates and a subscription code: they are needed to open the course for you and keep it open. For the sales data Lemon Squeezy is an independent controller and handles it under its own privacy policy. If you buy lifetime access, instead of the subscription I receive the order code.

The forum

If you write in the forum, we keep your username, your posts and your replies, with date, level and topic, plus the likes and reports you make. Anyone who opens the forum can see the posts, with your username only: never your email or your name. If you ask for notifications, we send you at most one email a day. Posts are deleted after one year, or straight away if you delete them or delete your account.

Emails

We only write to you about the service: the sign-in link, messages about payment and renewal, important changes to the terms. No newsletters and no advertising.

What I count

Without cookies and without knowing who you are, I count a few steps in the course: how often it is opened and which part of the site people come from, how often the purchase page is opened and a payment button is pressed, how often the account window is closed without signing in, how many new accounts are created and with which sign-in method, how often someone leaves for the Lemon Squeezy checkout, and how many purchases, renewals, cancellations and refunds come in. Only daily totals are kept, with the language of the course: no IP address, no code of yours, nothing that links a number to you or to your account, and nothing stored on your device to do it. I use them to see whether the course and the purchase page work.

Cookies

To keep you signed in we use a single technical cookie, ti_sessione, which lasts 60 days. While you sign in with Google there is a second technical cookie that lasts ten minutes at most. Neither is used to track you, and there are no advertising cookies.

Who else handles the data

The data is stored on the servers of Cloudflare, which hosts the site; sign-in emails are sent through Resend. Both act only as processors, on my behalf. Cloudflare, Resend and Lemon Squeezy are companies based in the United States: data transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses. We do not sell or share your data with anyone else.

How long

We keep the data as long as you have the account. Expired sign-ins are deleted automatically every night. If you delete your account, the account, your progress, your answers and your open sign-ins disappear immediately.

Your rights

From your profile you can download all your data as a file and delete your account at any time. You also have the right to ask for access to your data, to correct it or delete it, and to object to processing: write to privacy@thuisitaliaans.com. If you think your data is mishandled, you can contact the Autoriteit Persoonsgegevens, the Dutch authority, or the authority in your country.

Age

The course is for people aged 16 or over. Under 16 you need a parent's permission.