Privacy policy

Who runs Loci

Loci (learn-loci.com) is a personal, free project run by Simone Cremasco, who is the data controller under the GDPR. For anything about your data, write to simonecremasco94@gmail.com.

Using Loci without an account

You can use the whole site without signing in. In that case your progress (scores, streaks, palaces, PAO system, settings) is saved only in your browser's local storage and never reaches us (except the anonymous daily challenge results described below). Clearing the site data in your browser deletes it.

Loci shows no ads and uses no analytics, tracking cookies or third-party trackers. Fonts are served from our own domain.

Daily challenge stats

When you finish the daily challenge, with or without an account, your browser sends an anonymous result to build the day's shared stats and leaderboard: the date, the site language, which words you recalled and which you missed, your memorizing and recall times, and a random code generated for that game only (so it isn't counted twice). Nothing links this result to you, your account or your other games: no name, email, account identifier or IP address is stored with it.

Results are deleted automatically after 60 days. The legal basis is our legitimate interest in offering the shared stats and leaderboard (Art. 6(1)(f) GDPR).

Signing in with Google (optional)

If you choose to sign in with Google, we receive from Google only the basic profile information allowed by the openid, email and profile permissions:

• your email address;
• your name and the link to your profile picture;
• a unique account identifier.

What we store and why

For signed-in users we store the data above plus one document with your progress on Loci, so you can find it on every device. We use it only to let you sign in and to sync your progress: never for advertising, profiling, or sale to anyone. The legal basis is providing the service you asked for (Art. 6(1)(b) GDPR).

To keep you signed in, a session token is saved in your browser's local storage. Signing out removes it, together with the local copy of your progress (which stays in your account).

Loci's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

Your data is handled on our behalf by these providers, each bound by its own data processing terms:

• Supabase — sign-in and the database holding accounts, progress and the anonymous daily challenge results;
• Vercel — hosting of the website (it may keep technical logs such as IP addresses for security, for a short time);
• Google — the sign-in itself, under Google's privacy policy.

Transfers outside the EU

Some providers may process data outside the European Economic Area. In that case the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep your account data until you ask us to delete it. Write to simonecremasco94@gmail.com from the address of your account and we will delete your account and all your progress within 30 days.

Your rights

Under the GDPR you can ask to access, correct, delete or receive a copy of your data, and object to or restrict its processing, by writing to simonecremasco94@gmail.com. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Children

Loci can be used by anyone without an account. If you are under 14, ask a parent or guardian before signing in with Google.

Changes

If this policy changes, the new version will be published on this page with an updated date. Significant changes will be highlighted on the site.