Skip to main content

Privacy Policy

Last updated: October 29, 2026

Effective for https://studywizardry.com — see “Last updated” above.

1. Controller (Art. 4(7) GDPR)

StudyWizardry Education UG (haftungsbeschränkt)
Friedrichstraße 155
10117 Berlin
Deutschland
Email: [email protected]
Phone: ****

2. What data we process

Depending on how you use the service, we may process:

  • Account data (e.g., email, login identifiers, hashed password, preferences, language)
  • Usage data (e.g., viewed content, learning progress, interactions)
  • Device/log data (e.g., IP address, timestamps, browser/OS, referrer)
  • Payment data (only if you buy Premium on the web; handled by Stripe, see section 4)

We also keep internal page-view and abuse-prevention logs on our own server (for example path, route, timestamp, referrer, user agent and a hash of the IP address). These internal measurements are separate from optional third-party analytics.

Our websites load their fonts, scripts and the math display (MathJax) from our own server. No third party receives your IP address from that.

We process personal data for the following purposes:

  1. Providing the service / performing the contract (Art. 6(1)(b))
    Account creation, authentication, learning content delivery, support.
  2. Security and abuse prevention (Art. 6(1)(f))
    Fraud/spam prevention, error analysis, system stability.
  3. Improving the web app (Art. 6(1)(f))
    Product statistics in our web app before you answer the cookie banner, without storing anything on your device (see section 11).
  4. Service access control and free-usage enforcement (Art. 6(1)(f), where applicable Art. 6(1)(b))
    Recognising returning guest browsers to enforce free-use limits and prevent abuse.
  5. Consent (Art. 6(1)(a))
    Optional third-party analytics/marketing technologies (see Cookie Policy).
  6. Legal obligations (Art. 6(1)(c))
    E.g., statutory retention obligations.

4. Processors and third parties

We may use service providers acting as processors, including:

  • Hosting: BitCommand LLC, Sigmundstraße 135, 90431 Nuremberg, Germany: the servers of this website and of our web app (app.studywizardry.com)
  • Network and security: Cloudflare, Inc. (USA): every request to our websites passes through Cloudflare's network (DNS, encryption, protection against attacks), which processes your IP address and request data for that; in our web app, Cloudflare Turnstile checks at sign-up that you are not a bot
  • File storage: Cloudflare (R2), for photos, screenshots and files you upload
  • Email: Resend (USA), to send sign-in codes and answers to your messages
  • Sign-in with Google (optional): Google Ireland Limited, only if you choose to sign in with your Google account (on the website and, through Firebase Authentication, in the web app)
  • AI processing: Groq, OpenAI and OpenRouter (which passes a request on to the provider of the AI model you chose, such as Google or xAI), to produce answers, explanations and study material from the questions, text and images you send
  • Usage statistics (optional): Google Analytics (Google Ireland Limited), only with your consent (see the Cookie Policy)
  • Product statistics in the web app: PostHog Inc. (USA), with the data kept on PostHog's servers in the EU (see section 11)
  • Payments: Stripe Payments Europe, Ltd. (Ireland), when you buy Premium on the web; in the iPhone and Android apps, Apple and Google handle the purchase

Where required, we conclude data processing agreements (Art. 28 GDPR).

5. International transfers

If providers process data outside the EU/EEA, we ensure an adequate level of protection (e.g., adequacy decision, Standard Contractual Clauses) and provide relevant information in this policy and/or the provider documentation.

6. Retention

We keep personal data only as long as necessary for the purposes above or as required by law. Afterwards, we delete or anonymize data.

Typical retention examples:

  • Cookie-consent preferences: up to 6 months
  • Internal operational/page-view logs: only as long as needed for analytics, fraud prevention, support, and legal obligations

7. Your rights

You may have the following rights (subject to legal requirements):

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16)
  • Erasure (Art. 17)
  • Restriction (Art. 18)
  • Data portability (Art. 20)
  • Objection (Art. 21)
  • Withdrawal of consent (Art. 7(3))

Contact: [email protected].

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Details are described in our Cookie Policy. We store analytics or marketing information on your device, or read it from there, only with your opt-in consent. Our web app's product statistics also run before you answer, without storing anything on your device (see section 11). You can change your choice at any time via “Cookie settings” in the footer, and in the web app under Settings → Cookie preferences.

9. Minors

The platform is intended for users aged 16+. Under 16, use is only permitted with parental/guardian consent.

10. StudyWizardry browser extension

Our Chrome extension runs on the pages you visit, but it only sends data when you ask it to:

  • What it sends: when you choose Answer, Explain, Translate, Check grammar or Summarise, the text you selected; when you use “Solve from screen”, a screenshot of the area you marked. It goes to our API (studywizard.app) together with your account token (before you sign in, the token of a guest account) and language setting, so that we can produce the result.
  • What it does not send: pages you don't use it on, your browsing history, or what you type into forms.
  • What is saved: answers and explanations are saved to your account history, where you can rename or delete them, as in our app. Translations, grammar checks and summaries are not saved.
  • Free tries without an account: before you sign in, the extension creates a guest account without a name or email address, so that you can try it a few times. Answers and explanations made as a guest are saved like account history. When you sign in, they move into your account and the guest account is closed.
  • In your browser: your sign-in token (or the guest account's), how many free tries you used, your settings (theme, button position, sites where you hid the button, translation language, your choice about usage statistics) and a link to your last result are kept in the browser's extension storage. Signing out deletes the token; removing the extension deletes all of it.
  • Sign-in: you sign in on our web app (app.studywizardry.com), which hands the extension a sign-in token for your account.
  • Usage statistics (optional): only if you agree (the extension asks once, and you can switch it on or off at any time in its menu), it sends usage events to Google Analytics (Google Ireland Limited): which feature you used (for example “Translate”) and whether it worked, the steps of signing in, the install and updates, and the extension's own error messages. It never sends the pages you visit, the text you select or the results. A random ID stored in the browser groups the events; once you are signed in, your account's ID is added so that these numbers can be combined with those of our app and website. Nothing is sent before you answer, and nothing ever if you decline. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time with the switch.

We do not sell this data, use it for advertising or profiling, or use it for anything other than the features described here.

11. Product statistics in our web app

Our web app (app.studywizardry.com) uses PostHog (PostHog Inc., USA; the data is kept on PostHog's servers in the EU) to see which features are used and where errors happen:

  • What it sends: the pages you open in the web app, its own events (for example that an answer was made or that the Premium page was opened) and error messages. It does not send your questions, photos, answers or messages; in the Help center it sends the words you searched for. Once you are signed in, the events are linked to your account's ID; your name and email address are not sent.
  • Before you answer the cookie banner: nothing is stored on your device. A random ID held only in the page's memory groups the events of one visit and is gone when you close or reload the page. Legal basis: our legitimate interest in finding errors and improving the web app (Art. 6(1)(f) GDPR).
  • If you accept statistics: PostHog keeps the random ID in a cookie and in local storage for up to 1 year, so that your visits can be counted over time, and records how the pages are used (session replays), with all text and everything you type hidden and pictures left out, so that we can see where something goes wrong. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
  • If you reject statistics: the web app no longer loads PostHog and sends it nothing. If PostHog was already running in that visit, it stops, what it stored is deleted, and PostHog keeps a note of your “no” in local storage.
  • You can change your choice at any time in the web app under Settings → Cookie preferences. Rejecting statistics there is also the simplest way to object to the processing (Art. 21 GDPR); you can also write to us.

12. Contact

Privacy requests: [email protected]