Privacy Policy

Last updated 29 October 2026

This policy explains what personal data Witsy collects, why, and your rights over it. Witsy is operated by Futuedu Oy ("we", "us"), the data controller for the data described here. Questions: support@witsy.io.

Data we collect

Account — your email address; your password, stored only as a salted hash and never in plaintext; and a record of the Terms version and date you accepted.
Learning data — your placement-test answers and results, lessons completed, and the per-skill strength and review history we use to recommend what to learn next.
Pre-account placement data — if you take the placement test before signing up, we store your answers against a pseudonymous random identifier (held in the witsy_placement_anon cookie) so your results transfer to your account when you create one. This identifier is not anonymous: once you create an account, the data is linked to you.
Purchase data — for paid plans we store a Stripe customer and payment reference, your purchase date and entitlement status (which tier, whether it is active), the country your purchase is billed to, whether and when you agreed at checkout that your access would start immediately, and a record of any withdrawal or refund you request. If you tell us why you are leaving when you cancel or withdraw, which is always optional, that answer is kept with your subscription at Stripe. Payment card details are handled entirely by Stripe; we never receive or store them.
Feedback you send — if you send feedback or report a bug, we keep your message with your account, together with the page and lesson step you were on, your last actions in the spreadsheet, and whether you sent it from a computer, a phone or a tablet, so we can find and fix what you ran into.
Technical & security data — your IP address and basic request metadata in short-lived server logs, used for security, abuse prevention, and debugging.
Which channel sent you — if you arrive from a link we published (a search result, a video description, a community post), we record that the visit came from that channel, along with the page you landed on and the time. This record contains no identifier of any kind — no account, no cookie, no IP address — and cannot be linked back to you or to any other visit. If you then create an account, the channel name and the page you first landed on are stored on it, so we can tell which of our own efforts — and which of our pages — brought people to Witsy. If no channel sent you, only that first page is stored. If you answer the sign-up form's optional question about how you found Witsy, that answer is stored on your account as well. We also record which country a visit, a placement test or a sign-up came from. Our host, Cloudflare, works this out from your IP address on every request; we store only the country, never the address, so we can tell which countries Witsy reaches and how well it serves them. In the same way we record whether the visit, test or sign-up came from a computer, a phone or a tablet, worked out from the browser description every browser sends; we store only that category, never the description, so we can tell whether Witsy works as well on a phone as on a computer.

What we do not collect

We do not use advertising or cross-site tracking cookies, we do not use analytics that profile you for advertising or follow you across other websites, and we do not sell or share your personal data with advertisers or data brokers.

Why we use it (legal bases)

To provide Witsy and your account — performance of our contract with you.
To process payments — performance of our contract, and compliance with legal obligations (tax and accounting records).
To keep the service secure and improve it — our legitimate interests in preventing abuse and making Witsy work well.
To send account and transactional email (verification, password reset, receipts) — performance of our contract. We do not send marketing email without your consent.

Cookies

We use the minimum cookies required to run the service. All are first-party and strictly necessary, so we do not show a consent banner:

__Host-witsy_session — keeps you logged in. Essential. Expires after about 30 days.
witsy_placement_anon — remembers a placement test you started before signing up so the results carry over to your new account. Functional. Expires after about 30 days.
d1_bookmark — makes sure each page shows what you've just done, such as your last answer, even when a nearby copy of our database serves it. It holds a position in our database, nothing about you. Essential. Expires when you close your browser.

We set no advertising, marketing, or third-party analytics cookies. If this ever changes, we will update this policy and ask for your consent first where the law requires it.

Separately from cookies, your browser keeps a few items of plain app state. None contains an identifier, none is ever sent to another website, and none can be used to recognise you. In local storage, which stays until you clear your browser data: the channel you arrived from (for example reddit) with the page you landed on, kept for 30 days so that if you create an account within that time we can credit the right channel; where you are in the first-visit tutorial; and answers you gave while offline, held until they reach your account. In session storage, only while the tab is open: the first page you opened in that tab, so that a visit no channel sent can still be credited to a page.

Analytics

To understand how Witsy is used in aggregate — how many people visit, which pages they reach, and where they came from — we use Cloudflare Web Analytics, a privacy-first analytics tool. It uses no cookies, no local storage, and no fingerprinting, and it does not track you across sessions or other websites. It processes your IP address momentarily to count a visit, but does not store it or use it to identify you. Our legal basis is our legitimate interest in measuring and improving the service.

Service providers

We share data only with the providers we rely on to run Witsy:

Cloudflare — hosting, our database and file storage, the Turnstile challenge that protects sign-up and login from bots, and the privacy-first website analytics described above. Turnstile and Web Analytics are both privacy-preserving and do not use tracking cookies.
Stripe — payment processing. When you pay, you are redirected to Stripe's secure checkout; your card details go to Stripe, not to us.
Resend — delivery of transactional email from witsy.io.
GitHub — hosts our source code and runs our scheduled jobs. It keeps a copy of our database backups for 30 days, and our weekly marketing reports: these are mostly counts, plus one row per paying account recording how they found Witsy and when they signed up and paid — never an email address or account identifier.

These providers may process data outside your country, including in the United States. Our database also keeps read-only copies in Cloudflare data centres in North America, Europe, Asia-Pacific and Oceania, so that Witsy loads quickly wherever you are. Where data leaves your country, the transfer is protected by appropriate safeguards: for providers certified under the EU–US Data Privacy Framework, that framework; otherwise the European Commission's Standard Contractual Clauses.

How long we keep it

Account and learning data — for as long as your account exists. Email us and we will delete your account and the data tied to it, except where we must keep records by law. We keep a de-identified copy of your practice history — what you practised and how it went, under a coded identifier with no name or email — to improve Witsy; once our backups of your account have expired, nothing links that copy to you.
Backups — copies of our database are kept for up to 6 months, then deleted. A deleted account is never restored from them.
Payment records — retained for at least 6 years to meet Finnish tax and accounting obligations, then deleted.
Server logs — kept only as long as needed for security and debugging, then deleted.

Your rights

If you are in the EU/UK (and in many other regions) you can ask us to access, correct, export, or delete your personal data, to restrict or object to certain processing, and to withdraw consent where processing relies on it. To exercise any of these, email support@witsy.io. You also have the right to lodge a complaint with your local data protection authority.

Children

Witsy is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above; for material changes we will give you notice.

Contact

Futuedu Oy (Business ID 3308119-3), Hämeentie 81-83 B 49, 00550 Helsinki, Finland. Email support@witsy.io.