Privacy Policy

LexFlexer.com is wholly owned and operated by Gorgeous Games Ltd (Company No. 13214522), a company registered in England and Wales. Our registered address is 124 City Road, London EC1V 2NX.

If you have any questions about this privacy policy or how we handle your data, contact us at [email protected].

When you use LexFlexer, we collect:

• Account information — email address, username, and profile preferences when you sign up
• Authentication data — if you sign in with Google, we receive your name, email, and profile picture from Google. We do not store your Google password.
• Learning data — test results, scores, word mastery progress, and learning preferences
• Usage data — pages visited, features used, session duration, and device type
• Technical data — IP address, browser type, and operating system for security and troubleshooting

We use your data to:

• Provide and personalise the LexFlexer learning experience
• Track your vocabulary progress and adapt difficulty
• Authenticate your account and keep it secure
• Improve our service based on usage patterns
• Send important service updates (we do not send marketing emails unless you opt in)

Your data is stored on secure servers hosted by Railway (railway.app). We use industry-standard security measures including:

• HTTPS encryption for all data in transit
• HttpOnly cookies for authentication tokens — never accessible to JavaScript
• Bcrypt password hashing — we never store plain-text passwords
• Regular security audits of our codebase and infrastructure

We use the following third-party services:

• Google OAuth — for "Sign in with Google" functionality. Google's privacy policy applies to data they process.
• Railway — for hosting our application and database
• Cloudflare R2 — for audio file storage
• OpenAI — for AI-generated word definitions, examples, and difficulty scoring. We send vocabulary words to OpenAI for processing; no personal data is shared.

We do not sell your personal data to any third party.

We use essential cookies only:

• Authentication cookies — HttpOnly cookies that keep you logged in securely
• Session cookies — to maintain your session state across pages

We do not use advertising cookies or third-party tracking cookies.

You have the right to:

• Access your personal data — your profile page shows your stored information
• Correct inaccurate data — update your profile at any time
• Delete your account and associated data — contact us at [email protected]
• Export your data — contact us to request a copy of your data
• Withdraw consent — you can revoke Google sign-in access from your Google account settings

LexFlexer is designed to be suitable for learners of all ages. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymised usage statistics may be retained for service improvement.

This privacy policy and any disputes arising from it are governed by the laws of England and Wales. You agree to the exclusive jurisdiction of the courts of England and Wales.

We may update this privacy policy from time to time. We will notify registered users of significant changes via email or an in-app notification. The "last updated" date at the top of this page reflects the most recent revision.

For any privacy-related questions or requests, contact us at:

Email: [email protected]
Address: Gorgeous Games Ltd (Company No. 13214522), 124 City Road, London EC1V 2NX