SimpleLearnPrivacy and cookies
Updated 8 October 2026
Controller
ImpressMedia, s. r. o. Privacy contact: info@impress.media.
Data and purposes
Accounts contain name, email, password hash, subscription status and sessions. We store activities, assignments and attempts: optional nickname, answers, score and time. Hosting security logs may include IP address and technical request information. An unverified email address does not establish mailbox ownership.
Legal bases
Accounts and activities are processed to perform the service contract. Security and abuse prevention rely on legitimate interests. Optional language storage requires consent; withdraw it in Privacy settings at any time.
Children and schools
Students play without accounts. Use pseudonyms, avoiding full names and sensitive information. Teachers see results for their own activities. Schools determine the purpose and legal basis for student processing and inform families. Before systematically processing identifiable child data, agree appropriate processing terms with the operator.
Sharing
Anyone can see public activities, which may be indexed. Private activities are accessible to their owner, administrators and visitors with a valid assignment link. Treat that link as an access key. Results are not public.
Cookies and storage
__Host-simplelearn is a necessary Secure, HttpOnly, SameSite=Lax sign-in cookie lasting up to 30 days. simplelearn-consent remembers your choice in local storage for 180 days. simplelearn-language is stored only with permission and removed on withdrawal. We currently use no analytics or advertising tracking. Rejection does not prevent games or signing in.
Providers and transfers
The hosting platform uses Cloudflare infrastructure. If configured, Resend delivers verification and reset emails. If payments are enabled, Stripe processes payments; card numbers are not stored here. Author-provided external images may contact their servers and disclose technical request data. Providers may process data outside the EEA; contact info@impress.media for details of applicable safeguards.
Retention
Account data and activities remain until deletion. Completed attempts are periodically removed after 90 days in bounded batches; high volume can delay cleanup. Expired sessions and reset links are cleaned periodically. Teachers can delete results sooner. Provider logs and required financial records follow separate retention obligations.
Rights and controls
Privacy settings provide JSON data export, deletion of your activity results, and account closure with password confirmation. Students can delete their attempt at the end of a game using its access token; for later requests contact the teacher or operator. Request access, correction, deletion, restriction, portability or object at info@impress.media. We normally respond within one month. You may complain to the Slovak Office for Personal Data Protection or your competent supervisory authority.
Security and recovery
Passwords use PBKDF2 hashes and traffic uses HTTPS. Recovery codes are shown once; only hashes are stored. A code resets your password once and is replaced with a new code. Store it as securely as a password. Operator accounts and accounts with active subscriptions require contacting the operator for closure.