Privacy Policy

1. Introduction and Data Controller

Dz Lingo (sole proprietor, SIRET 897 977 450 000 13, 22 rue de Breteuil, 78540 Vernouillet, France) is the controller of your personal data. Contact: support@dzlingo.com. This policy, compliant with the EU General Data Protection Regulation (GDPR 2016/679), explains what data we collect, why, how long we retain it and what your rights are.

2. Data Collected

We collect the following data when you use Dz Lingo:

• Email address — required for account creation and authentication
• First and last name — optional, to personalise your experience
• Progress data — completed lessons, scores, time spent, favourites
• Preferences — interface language, user settings

3. Legal Bases and Purposes of Processing

Your data is processed on the following legal bases (Art. 6 GDPR):

• Performance of contract (Art. 6.1.b) — manage your account, authentication and subscription
• Performance of contract (Art. 6.1.b) — save and display your learning progress
• Legitimate interest (Art. 6.1.f) — improve content and user experience (anonymised data)
• Performance of contract (Art. 6.1.b) — send necessary transactional emails (password reset, payment confirmation)

4. Retention Period

Your data is retained for the following periods:

• Account and progress data: for the duration of your account activity, then 5 years after your last login or account deletion
• Billing data: 10 years (statutory accounting obligation)
• Upon an account deletion request, your personal data is erased within 30 days, unless a legal retention obligation applies

5. Data Security

Your data is hosted in France by o2switch (Clermont-Ferrand). Passwords are hashed (bcrypt). Communications are encrypted via HTTPS/TLS. We never access your data without a legitimate reason and we never sell it to third parties.

6. Transfers Outside the European Union

Payments are processed by Stripe, Inc. (US company). Browsing statistics are collected via Google Analytics 4 (Google LLC, US company), only with your consent. These transfers are governed by the Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection for your data.

7. Cookies and Analytics Trackers

Essential cookies (no consent required)

Dz Lingo uses cookies strictly necessary for its operation: authentication (JWT), user session and language preferences. These cookies do not collect any personal data beyond what is required to perform the service (legal basis: Art. 6.1.b GDPR).

Partner attribution cookie (no consent required)

When you arrive on Dz Lingo through a link from one of our affiliate partners, a first-party technical cookie records the partner's identifier for a limited period (typically 30 days). It is used solely to attribute a potential commission to the partner if you subscribe, and does not contain any data that personally identifies you. The partner never has access to your individual data, only to aggregated statistics (legal basis: legitimate interest, Art. 6.1.f GDPR).

Analytics cookies — Google Analytics 4 (with your consent)

With your agreement, we use Google Analytics 4 to measure site traffic and improve the user experience. Google Analytics collects anonymised data about your browsing:

• Data collected: pages visited, session duration, browser language, device type (no data allowing direct identification)
• Retention period: 14 months (Google Analytics 4 default setting)
• Transfer outside the EU: Google LLC (United States), governed by Standard Contractual Clauses (SCCs) — see Google's Privacy Policy

You can withdraw your consent at any time by clicking the button below. The cookie preference banner will reappear and no analytics cookies will be set until you give a new consent.

Manage my cookie preferences

8. Your Rights

In accordance with the GDPR (Art. 15 to 22), you have the following rights, exercisable at support@dzlingo.com:

• Right of access (Art. 15): obtain a copy of the data we hold about you
• Right to rectification (Art. 16): correct inaccurate or incomplete data
• Right to erasure (Art. 17): request deletion of your account and data
• Right to portability (Art. 20): receive your data in a structured, readable format
• Right to object (Art. 21): object to processing based on legitimate interest
• Right to restriction (Art. 18): request restriction of processing in certain cases
• Right to lodge a complaint: file a complaint with the CNIL (www.cnil.fr) if you believe your rights are not being respected