Privacy Policy
Last updated: 2026-07-18
AnyLearn ("we", "the site") is a small personal project that hosts AI-generated micro-lessons and tracks your progress through them. This page explains what we collect, why, and how to get it deleted.
What we collect
When you sign in with Google, we store the following from your Google profile, via the standard OAuth flow:
- Your email address
- Your display name
- Your profile image URL
- A Google account identifier used to recognise you across sessions
As you use the site we also store:
- Which lessons you have started and completed
- How far you got in each lesson and your quiz scores
- Certificates issued to you when you complete a learning path
- A session cookie that keeps you signed in
We also use Google Analytics to understand how the site is used in aggregate: which pages are visited, how visitors arrive, and roughly where they are. It sets its own cookies and collects your IP address (which Google truncates), device, and browser. This applies to every visitor, signed in or not.
We do not use advertising cookies or ad retargeting, and we do not sell, rent, or share your data with anyone for marketing.
Why we collect it
- Profile data — so we know it's you when you return, and so we can show your name on your certificates.
- Progress data — so the next time you open a lesson you continue where you left off, and so your stats (XP, streak, completed lessons) work.
- Session cookie — strictly necessary for sign-in.
- Analytics data — so we can see which lessons people actually read and finish, and improve the ones they abandon.
Under GDPR our lawful basis is consent (you sign in voluntarily) for profile data, and legitimate interest in operating and improving the site for progress and analytics data. We are aware that EU rules expect an opt-in before analytics cookies are set; a consent banner is planned, and until it ships you can opt out using the methods in the Cookies section below.
Who else sees it
AnyLearn runs on a few third-party services that necessarily process small slices of your data on our behalf:
- Google — provides the sign-in. They see the fact that you authenticated to AnyLearn.
- Google Analytics (Google Ireland) — receives your page views, referrer, truncated IP, and device information so we can see how the site is used. It does not receive your name, email, or quiz answers.
- Vercel (US/EU) — hosts the website itself.
- Neon (EU region) — hosts the PostgreSQL database that stores your profile and progress.
We do not transfer your data to anyone else. Certificates you generate are public by URL only if you choose to share that URL — they are not listed anywhere on the site or indexed by us.
How long we keep it
We keep your data as long as your account exists. If you delete your account (see below) we remove your profile, progress, and certificates from the database immediately. Google Analytics data is held separately by Google under their own retention schedule and is not tied to your AnyLearn account, so deleting your account does not erase it; use the opt-out options in the Cookies section to stop that collection.
Your rights
You can, at any time:
- Delete your account from /settings. This is irreversible and removes all your data from our database.
- Export your data. Email us at the address below and we'll send you a JSON dump of everything we have on you within 30 days.
- Correct your data. Your display name and image come from Google — update them there and they'll refresh on your next sign-in.
- Complain. If you're in the EU you have the right to lodge a complaint with your local data protection authority.
Cookies
We set a single first-party session cookie (next-auth.session-token) used to keep you signed in. It's strictly necessary and is removed when you sign out or delete your account.
Google Analytics additionally sets its own cookies (names beginning _ga) to count visits and sessions. These are analytics cookies, not advertising ones. We do not currently show a cookie banner, so these load for every visitor; if you would rather not be measured, you can block them with your browser's cookie settings, an ad/tracker blocker, or Google's opt-out add-on. We do not use advertising or retargeting cookies.
AI-generated content
Lessons on AnyLearn are written by large language models. We review them informally, but they may contain errors, oversimplifications, or out-of-date information. They are not professional advice. See our terms of service.
Contact
Questions about this policy, data export requests, or anything else: email contact@anylearn.cc.