Privacy Policy
Last updated: October 2026
This policy explains what personal data TELCB1.COM collects when you use the website, why we collect it, who processes it for us, how long we keep it and what rights you have.
1. Data Controller
The data controller for this website is TELCB1.COM. For any data-related inquiries, please contact us at: [email protected]
2. What we collect and why
- Account: Your username, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name and email address from Google. We use them to run your account and to contact you about it.
- Learning data: Your exam attempts, answers, scores and time spent, and your B1 readiness checks. We use them to show your results and your progress. The texts you write in the writing section are sent to an AI service provider, which scores them and writes feedback for you.
- Speaking practice: When you use speaking practice, your voice is recorded during the session and turned into text, so that an AI conversation partner can answer you and your session can be scored, with feedback on what you said and how you said it. AI service providers process the recording and the transcript for us. We delete recordings after 6 months; our providers keep their copies only for a limited period. The transcript and your results stay in your account until you delete it.
- Payments: Your plan, the amounts, dates and status of your payments, and the subscription and payment IDs from our payment providers. You enter card and PayPal details directly with Stripe or PayPal; we never see or store them.
- Security and technical data: Your IP address and the country it belongs to, recorded when you sign up and in our activity logs (for example logins and payments), the type of device you used for an exam, and error reports when something breaks. When you register, Cloudflare Turnstile checks that you are not a bot. We use this data to keep the website secure, prevent abuse and fix errors.
- Where you came from: The website or campaign that brought you to us (the referring website and the campaign tags in the link), saved with your account when you sign up. We use it to understand which channels bring us learners.
- Usage analytics: How visitors use our pages, recorded by Microsoft Clarity only if you allow it in the cookie banner (see sections 4 and 6). We use it to find out what works and what confuses people, and to improve the website. We also count page views with Simple Analytics, which sets no cookies and does not store your IP address.
- Emails: We send you the emails your account needs, such as the welcome email, password resets and payment confirmations. We also send occasional practice reminders and news about the website; each of these has an unsubscribe link, and you can turn them off at any time. We keep a record of the emails we sent you.
- Feedback and messages: What you send us through the feedback form or by email, and our replies.
3. Legal bases
- Art. 6(1)(a) GDPR and §25(1) TDDDG (consent): for Microsoft Clarity and its cookies. You can withdraw your consent at any time under “Cookie settings”, with effect for the future.
- Art. 6(1)(b) GDPR (performance of a contract): to run your account, provide exams, speaking practice and feedback, and handle your payments.
- Art. 6(1)(f) GDPR (legitimate interests): to keep the website secure, fix errors, understand how the website is used and improve it, learn which channels bring us learners, and send you practice reminders and news about the website.
Where we rely on legitimate interests, you can object at any time (Art. 21 GDPR) by writing to us at: [email protected]
4. Service providers
We use the following service providers. As processors (Art. 28 GDPR), they handle your data on our behalf and under our instructions. Some of them, such as the payment providers, Google and Microsoft, also process certain data for their own purposes under their own privacy policies.
| Provider | What for | Which data |
|---|---|---|
| Hosting provider | Our servers and database | All data described in this policy |
| AI service providers | Speech, conversation and language analysis for speaking practice and writing feedback (EU and USA) | Voice recordings, transcripts and the texts you write |
| Stripe, PayPal | Payments | Name, email address, payment details and amounts |
| Resend | Sending emails | Email address and the content of the email |
| Sentry | Error monitoring | IP address, technical details of the error and, if you are logged in, your account details |
| Cloudflare | Fast and secure delivery of the website, bot protection (Turnstile) | IP address and technical connection data |
| Sign in with Google, if you choose it | Name and email address | |
| Microsoft Clarity | Usage analytics: records how visitors use our pages (clicks, scrolling, page views)Only with your consent | Usage, device and browser data. If you are logged in, your account ID, email address and plan. |
| Simple Analytics | Page view statistics without cookies | Page address, referring website, browser and device type. No cookies; your IP address is not stored. |
5. Transfers outside the EU
Several of these providers are based in the USA or may process data there. These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the Standard Contractual Clauses adopted by the European Commission.
6. Cookies
Cookies that the website needs to work are always on (§25(2) No. 2 TDDDG). Analytics cookies are only set if you allow them in the cookie banner, and you can change your choice at any time.
| Cookie | What for | How long |
|---|---|---|
| cookie_consent | Remembers your choice in the cookie banner | 1 year |
| session | Keeps you logged in and remembers your language and where you came from | Until you close your browser |
| remember_token | Keeps you logged in if you choose “Remember me” or sign in with Google | 1 year |
| _vid | A random ID that recognises your browser when you come back, used for usage analyticsOnly with your consent | 1 year |
| _clck, _clsk | Microsoft Clarity: recognise your browser and group your page views into visitsOnly with your consent | Up to 1 year |
| Cloudflare cookies | Security and bot protection | Short-lived |
Some settings, such as dark mode and your practice progress in the Einbürgerungstest trainer, are stored only in your browser and are never sent to us.
7. How long we keep your data
| Data | How long |
|---|---|
| Speaking practice recordings | 6 months |
| Copies at our AI service providers | A limited period set by each provider, then deleted |
| B1 readiness checks taken without an account | 30 days |
| Copies of the emails we send, kept while they are being delivered | 30 days |
| Activity logs (IP address and country) | Kept for security; we have not set a fixed period yet |
| Everything else: your account, learning data, speaking transcripts and results, payment records and email history | Until you delete your account |
You can ask us to delete your account at any time by writing to us at: [email protected]
We then cancel any running subscription, delete your learning data, speaking data, payment records and email history, and anonymise your account. Stripe and PayPal keep their own records of your payments as the law requires.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict how we process your data
- Export your data (data portability)
- Object to data processing
- Complain to a data protection supervisory authority, in particular in the EU country where you live or work
To exercise any of these rights, please contact us at: [email protected]
9. Changes to this policy
We update this policy when our services or the law change. The date at the top shows when it last changed. If a change significantly affects how we use your data, we will let you know on the website or by email.
10. Contact
For any privacy-related questions or requests, please contact us at: [email protected]