Privacy Policy

StepbyStep Language (“SBSL”, “we”) is a language-learning website at sbsl.traviohub.com. This policy explains what we collect when you use it. For any question about it, write to gurbanzadamurad@gmail.com.

Your account. Your email address, your username and your password, which we store only as a secure hash and never in readable form. If you sign in with Google, we receive your name, email address and profile picture from Google; we do not get your Google password.

Your learning. The phrases you save and mark as learned, how long you study, how many times a day you use each feature (to apply daily limits), and anything you write or upload in a learning tool, such as a book page or a lesson you teach.

Sign-in security. Short-lived codes and links for two-step sign-in and password changes. They expire within minutes and are stored only as hashes.

Technical data. Your IP address, used briefly to block abuse (too many requests), and server logs with the pages requested and errors.

Usage statistics. With Google Analytics we see how the site is used: pages visited, rough location (country or city), device and browser, and how you found us.

• To create your account, sign you in and keep it secure.
• To save your progress, word lists and study time, and show them on your profile.
• To send emails you need: sign-in confirmations and password-change codes. We do not send marketing.
• To prevent abuse and keep the site running within its daily limits.
• To understand which parts of the site help learners, and improve them.

Your username and the number of phrases you have learned can appear on the community leaderboard, and your list of learned phrases can be opened from it. Your email address is never shown to other people.

We do not sell your data. These services process it on our behalf, only to run the site:

• Google Cloud (United States) hosts the website.
• Neon (database on Amazon Web Services, United States) stores your account and learning data.
• Google Sign-In, if you choose to sign in with Google.
• Google Analytics collects the usage statistics described above.
• Gmail delivers our sign-in and security emails.
• Google Gemini reads text you submit to AI-powered tools (for example a book page or a lesson) to produce translations and replies.
• YouTube plays the videos on the site. When a video loads, YouTube may set its own cookies under Google's privacy policy.

Because these services run in the United States, your data may be processed outside your country.

• Sign-in cookie: keeps you signed in. It is needed for the site to work and is removed when you sign out.
• Google Analytics cookies (names starting with _ga): count visits and tell visits apart. You can block them in your browser settings or with Google's Analytics opt-out add-on.
• YouTube cookies, set by YouTube when a video is shown.

We keep your account and learning data for as long as your account exists. When your account is deleted, your saved phrases, learned phrases, study sessions and other learning data are deleted with it. Sign-in and password codes expire within minutes. Google Analytics keeps usage statistics for up to 14 months.

You can at any time:

• see and change your username, password and two-step sign-in on your profile;
• remove saved and learned phrases;
• ask for a copy of your data, or for your account and all its data to be deleted, by writing to gurbanzadamurad@gmail.com from the email address of your account. We reply within 30 days.

If you signed in with Google, you can also remove SBSL's access at myaccount.google.com/permissions.

The site is served only over HTTPS. Passwords and security codes are stored as hashes, two-step sign-in is available, and requests are rate-limited to stop guessing. No system is perfectly secure, but we work to protect your data and will tell affected users if a breach puts it at risk.

SBSL is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell signed-in users on the site.