Last updated: 2026-09-05.
This policy explains what data calangolingo collects, why, who it is shared with and what you can demand. It covers calangolingo.com and all four of its versions — English, Portuguese, Spanish and French.
Who is responsible
The party responsible for processing your data — the controller, in the language of the GDPR and Brazil's LGPD — is M2 Assessoria e Consultoria. For anything on this page, use the contact form.
What we collect
It depends on how you use the site.
- No account, just reading the lessons: nothing that identifies you reaches us. Your study progress stays in your own browser, in local storage, not on our server.
- With an account: when you sign in with Google, we receive your name and email address from them, and we start storing your study progress against that account so you can pick up where you left off on another device. We never receive and never ask for your password.
- Through the contact form: the name, email and message you write.
- On ordinary visits: nothing. The server that delivers the pages keeps no access log — no IP, no page, no timestamp. Your IP reaches Google's servers (measurement, ads, YouTube) because your browser talks to them directly, and it reaches our database in one case only: when you send the contact form, where it sits beside the message to curb bulk submissions.
What for, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Account name and email | identify you and sync your progress across devices | performance of the service you asked for — GDPR art. 6(1)(b); LGPD art. 7, V |
| Study progress | show what you have studied and what is due for review | performance of the service |
| Contact name, email and message | reply to you | steps taken at your request — GDPR art. 6(1)(b) |
| The IP that submits the form | curb bulk submissions and abuse of the contact form | legitimate interest — GDPR art. 6(1)(f); LGPD art. 7, IX |
| Usage measurement cookies | understand, in aggregate, which pages are useful | consent — GDPR art. 6(1)(a); LGPD art. 7, I |
| Advertising cookies | show ads and measure how they perform | consent |
Advertising
This site shows Google AdSense ads. That is what keeps it free. On that, the following has to be said plainly:
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on those visits.
- You may opt out of personalised advertising in Google's Ads Settings.
- You may also opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info and, in Europe, at youronlinechoices.eu.
- The list of partners that may collect data through the ads, and what each does with it, is at how Google uses information from sites that use its services.
If you are in the European Economic Area, the United Kingdom or Switzerland, a consent notice appears before any advertising or measurement cookie is used, and you can change that choice at any time through the link in the footer of every page.
Usage measurement
We use Google Analytics 4 to know how many people use the site and which pages are useful. The configuration is deliberately cut back: the IP address is anonymised, Google signals and ad personalisation are switched off in the measurement, and these numbers are not cross-referenced with your account.
If you would rather stay out of the measurement permanently in this browser, open any page on the site with ?naomedir at the end of the address.
YouTube video and images
The video is embedded in privacy-enhanced mode (youtube-nocookie.com). But let this be said plainly, because it is what such pages usually hide: to make the player work, the lesson loads a script from YouTube, and YouTube writes cookies to your browser as soon as the lesson page opens — before you press play. They are its cookies, not ours: YSC, VISITOR_INFO1_LIVE and three others.
The episode thumbnails on the home page are also served from YouTube's servers, which means your IP address reaches them as the page loads.
Who we share with
- Google — Google account sign-in, measurement (Analytics), advertising (AdSense) and the YouTube player.
- Hostinger — the company hosting the server the site runs on.
- Public authorities, where legally required.
We do not sell your data. We do not trade it for money or for services, with anyone.
International transfers
The site's server and Google's services are outside Brazil. When you use the site your data may be processed in other countries, under those providers' contractual safeguards — in Google's case, the European Commission's standard contractual clauses.
How long we keep it
- Account and progress: as long as the account exists. Delete the account and the data goes with it.
- Contact messages, with the sender's IP: 24 months.
- Technical logs of the accounts service — page address, browser, no visitor IP: 7 days in the system journal.
- Cookies: each one's lifetime is on the cookies page.
Your rights
The GDPR (arts. 15 to 22) and the LGPD (art. 18) give you the right to:
- know whether we process data about you, and which;
- access that data and receive a copy;
- correct anything wrong or incomplete;
- erase the data and the account;
- withdraw consent given for non-essential cookies;
- object to processing based on legitimate interest;
- take your data to another service (portability);
- complain to a supervisory authority — your country's data protection authority in Europe, or the ANPD in Brazil.
To exercise any of them, write through the form. We reply within 5 days.
Children
The site is not directed at children under 13 and we do not knowingly collect data from them. If you know of such an account, tell us and it will be deleted.
Security
The site is served over HTTPS only. Server access is by cryptographic key, with passwords disabled. We store no password of yours: Google does the authenticating.
Changes to this policy
If this policy changes, the last-updated date at the top changes with it. A material change is announced on the site before it takes effect.