Privacy Policy
Last updated: June 14, 2026.
Data Controller
CI Method English (cimethodenglish.com), operated by Anton Khripko. Contact: hello@cimethodenglish.com.
Data We Process (Art. 13 GDPR)
Account data: name, email address, and profile picture obtained via Google OAuth. Learning data: video watch progress, session time, streak counts. Technical data: anonymised analytics events (page views, clicks) via Google Analytics; session tokens stored server-side.
Legal Basis (Art. 6 GDPR)
Account and learning data: performance of a contract (Art. 6(1)(b)) — we need these to provide the service you signed up for. Analytics: legitimate interests (Art. 6(1)(f)) — understanding how the product is used so we can improve it. Marketing emails (waitlist): consent (Art. 6(1)(a)) — you can withdraw at any time.
Retention Periods
Account and learning data: retained while your account is active; deleted within 30 days of account deletion. Analytics data: aggregated/anonymised after 14 months (Google Analytics default). Session tokens: expire after 30 days of inactivity.
Sub-processors
Vercel (hosting, EU & US data centres); Supabase/Neon (Postgres database, EU region); Google Analytics (analytics, anonymised); Google OAuth (authentication only — no data stored by us beyond the profile fields above).
International Data Transfers
Some sub-processors operate servers outside the EEA (primarily the United States). Transfers are covered by Standard Contractual Clauses (SCCs) adopted by the European Commission, or the EU–US Data Privacy Framework where applicable.
Your Rights (Art. 15–22 GDPR)
You have the right to: access your data (Art. 15); rectify inaccurate data (Art. 16); erasure ("right to be forgotten", Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing based on legitimate interests (Art. 21). To exercise any right, use the buttons below or contact hello@cimethodenglish.com.
Right to Lodge a Complaint
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In the EU/EEA, you may contact your national data protection authority. In the UK, this is the ICO (ico.org.uk).
Cookie Preferences & Opt-out
You can manage analytics cookies via the cookie banner (shown on first visit). To opt out of Google Analytics across all sites, install the Google Analytics Opt-out Browser Add-on. To withdraw marketing email consent, click "Unsubscribe" in any email.