Privacy Policy

English Era Studio ("we", "us", "our") operates the website englisherastudio.com and provides interactive English learning services. For questions about this policy, contact us at our contact form .

We collect the following categories of personal data:

• Account data: email address, display name, avatar, date of birth (optional), sex (optional), and the language you choose for word translations (optional) when you register or update your profile.
• Learning data: courses you own, lessons completed, exercise answers, words saved, and practice session results.
• Usage data: pages visited, features used, session timestamps, and browser timezone (used to calculate daily practice streaks in your local time), and how you found us (for example the ad or link you arrived from) — collected via server logs and analytics.
• Order data: the courses you buy, prices, and order dates. Payments are handled by Paddle, our Merchant of Record; we never see or store your card details.
• Communications: messages you send us via email or contact forms.

We use your personal data to:

• Create and manage your account and provide the learning platform.
• Personalise your learning experience and track your progress.
• Process orders and give you access to the courses you buy.
• Send transactional emails (email verification, password resets, order confirmations).
• Send promotional emails about new courses or features — only with your consent.
• Analyse usage patterns to improve the platform (always in aggregated or anonymised form where possible).
• Measure how well our advertising works, for example whether an ad led to a sign-up or a purchase.
• Protect our forms from spam and abuse.
• Comply with legal obligations.

Under the GDPR we process your data on the following lawful bases:

• Contract: processing necessary to deliver the service you signed up for.
• Legitimate interests: improving the platform, fraud prevention, and security.
• Consent: marketing emails and analytics and advertising cookies (you may withdraw at any time).
• Legal obligation: complying with applicable law.

We share data with trusted third-party processors only as necessary:

• Supabase — database, authentication and file storage (EU region).
• Vercel — hosting, edge network and privacy-friendly page analytics.
• Paddle — our Merchant of Record: checkout, payment processing, taxes, invoices and refunds. Paddle processes your payment details under its own privacy policy.
• Resend — sending account and order emails.
• Sentry — error monitoring, which may include technical details of the request in which an error occurred.
• Google — Google Tag Manager and Google Analytics, with your consent; and YouTube, which plays the videos inside lessons.
• Meta— the Meta Pixel and Meta's Conversions API, with your consent, used to measure sign-ups and purchases from our ads. Your email address is sent only in hashed form.
• Cloudflare Turnstile — spam protection on our contact form.
• ElevenLabs — text-to-speech audio generation (lesson text only, no personal data).

We do not sell your personal data to third parties.

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to retain it longer (e.g. financial records for 7 years).

If you are in the EEA, UK, or another jurisdiction with equivalent data-protection laws, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your local supervisory authority.

To exercise any right, email us at our contact form . We will respond within 30 days.

We use cookies and similar technologies to operate the site and, with your consent, to analyse usage. See our Cookie Policy for full details.

We apply industry-standard security measures including encrypted connections (TLS), row-level security on our database, and access controls. No system is perfectly secure; please also protect your account with a strong password.

We may update this policy from time to time. We will notify you of material changes by email or a prominent notice on the site. The "Last updated" date at the top reflects the most recent revision.

Questions or requests? Reach us at our contact form .