Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Sharpn
Hamburg, Germany
Email: contact@sharpn.de
2. Hosting (Vercel)
This site is hosted by Vercel Inc. (USA). When you visit, Vercel automatically processes server log data — including your IP address, browser type, and the date and time of the request — which is technically necessary to deliver the site and ensure its stability and security. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest). Transfers to the USA are safeguarded by the EU Standard Contractual Clauses / EU-US Data Privacy Framework.
3. Accounts & learning progress (Supabase)
Creating an account is optional — you can use the entire app without one. If you do sign up, we process the data you provide (your email address and a securely hashed password) and your learning progress (completed lessons, quiz scores, streak) to provide the account features and sync your progress across devices. This data is stored with Supabase in the EU (Ireland region). Legal basis: Art. 6 (1)(b) GDPR (performance of a contract). If you do not have an account, your progress is stored only locally in your browser and is never sent to us.
4. Video delivery (Cloudflare Stream)
Lesson and feed videos are delivered via Cloudflare Stream (Cloudflare, Inc., USA). To stream video to you, your IP address is processed by Cloudflare. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in efficient, reliable video delivery). Transfers to the USA are safeguarded by the EU Standard Contractual Clauses / EU-US Data Privacy Framework.
5. Usage & performance statistics (Vercel)
We use Vercel Web Analytics and Vercel Speed Insights to understand, in aggregate, how the site is used (e.g. page views) and how quickly pages load on real devices. Both are cookieless, build no personal profiles, and do not track you across other websites. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in improving and speeding up our service).
6. Cookies & local storage
We use only a strictly necessarycookie to keep you signed in (the Supabase authentication session) when you have an account. We do not use advertising or cross-site tracking cookies. For visitors without an account, learning progress is kept in your browser’s local storage and is not transmitted to us.
7. Fonts
Web fonts are self-hosted and served from this site. No connection to Google Fonts servers is made from your browser, so no data is shared with Google for fonts.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to its processing. You also have the right to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at the email address above. We do not use automated decision-making, and we do not sell your personal data.