Privacy Policy

Last updated · August 12, 2026

Locupix.com (the "Service") is operated by Locupix, LLC, a limited liability company incorporated in the State of Delaware and headquartered in Houston, Texas, USA ("Locupix", "we", "us", or "our"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

What you provide when you sign up

  • Username and email address
  • A password — stored only as a salted hash; we never see your plaintext password
  • Your chosen learning language and display (UI) language
  • Your timezone (detected from your browser at signup) so reminders arrive at sensible hours
  • Your opt-in choices for promotional emails and progress notifications
  • Optional preferences such as audio playback speed

If you sign in with Google or Apple

You can choose “Sign in with Google” or “Sign in with Apple” instead of creating a password. These providers send us a small subset of your profile through OAuth/OpenID Connect: your provider account ID, email address, and, where available, your name and profile-picture URL. We use this only to authenticate you and pre-fill your account. We do not request access to Drive, Calendar, contacts, or any other Google or Apple account data. If you use Apple’s Hide My Email feature, we receive the private relay email address Apple provides for your account.

Learning activity

  • Game and lesson round logs: the concepts and questions you saw, your answers, accuracy, and timestamps
  • Aggregate progress: XP, unlocked stages, and per-language progression
  • Stage and lesson completion history used to compute what to unlock next

Automatically collected

  • Your IP address and approximate request metadata, recorded in standard server logs
  • Browser and device user-agent
  • A first-party session cookie and a CSRF token, used to keep you signed in and to protect form submissions

How We Use Your Information

  • Operate the Service: authenticate you, save your progress, and deliver lessons in your chosen languages
  • Send transactional email such as account verification and password resets
  • Send promotional or progress-update emails only if you opt in; you can withdraw either opt-in at any time from your account settings
  • Prevent abuse, fraud, and automated account creation (see the Third-Party Services section)
  • Debug, secure, and improve the Service

We do not sell your personal information, and we do not use it to build advertising profiles about you outside of the third-party services described below.

AI-Generated Content

Locupix uses OpenAI’s APIs to generate educational content (translations, definitions, romanizations, and text-to-speech audio) that is then stored on our servers and served to all learners. In normal use, your personal data and your in-game answers are not sent to OpenAI — only the source words, prompts, and admin-curated text used to produce reusable content are. If this ever changes (for example, if we add an AI tutor that processes your inputs in real time), we will update this policy and clearly disclose it before enabling the feature.

Third-Party Services

The Service relies on a small number of third-party providers, each of which receives only the minimum information needed to perform its function:

  • Google (OAuth Sign-In) — only if you choose to sign in with Google. Subject to Google’s privacy policy.
  • Apple (Sign in with Apple) — only if you choose to sign in with Apple. Subject to Apple’s privacy policy.
  • Cloudflare Turnstile — used on registration and password-reset pages to block automated abuse. Cloudflare receives your IP address and a challenge token. Subject to Cloudflare’s privacy policy.
  • OpenAI — used as described above for content generation.
  • Email delivery (SMTP provider) — used to send verification, password-reset, and (if you opted in) promotional or progress emails.
  • Google AdSense — if and when ads are enabled on the Service, Google AdSense may set its own cookies and process your IP and interaction data to serve ads. Subject to Google’s privacy policy.
  • Hosting infrastructure — used to operate the Service under standard confidentiality terms.

Cookies and Similar Technologies

We use a first-party session cookie to keep you signed in and a CSRF token to protect form submissions. Cloudflare Turnstile and (if enabled) Google AdSense may set their own cookies as described above. We do not use third-party tracking cookies for cross-site behavioral profiling.

Data Sharing and Disclosure

We do not sell your personal data. We share information only:

  • With the service providers listed above, under contractual terms
  • To comply with applicable laws, regulations, valid legal processes, or governmental requests
  • To protect the rights, safety, or property of Locupix, our users, or the public
  • In connection with a merger, acquisition, financing, or sale of assets, in which case any successor will be bound by this Privacy Policy

Data Retention

We retain account information and learning activity while your account exists. When you delete your account, we remove your active account, authentication data, and account-linked learning activity. Limited records may remain temporarily in routine backups or operational and security logs, or where retention is necessary for security, fraud prevention, legal compliance, or dispute resolution. We retain those records only as long as reasonably necessary for those purposes and do not use them to maintain an active account. Fully deidentified aggregate statistics that cannot be linked back to an account may also remain.

Security

We use industry-standard practices to protect your account, including password hashing, encrypted transport (HTTPS), CSRF protection, and rate-limiting on sensitive endpoints. No system can be made 100% secure, however, and we cannot guarantee absolute security.

Your Rights and Choices

  • Access and correction: view and update your username, email, languages, and preferences from your account settings
  • Email preferences: opt in or out of promotional emails and progress notifications at any time from your account settings
  • Deletion: sign in and permanently delete your account and associated data from account settings
  • Withdraw OAuth consent: if you signed in with Google or Apple, you can revoke Locupix’s access from your Google account or Apple Account at any time
  • Other rights: depending on where you live (e.g., the EU/EEA, the UK, or California), you may have additional rights such as data portability or the right to object to processing — contact us to exercise these rights.

Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

International Users

Locupix is operated from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above and, for material changes, take reasonable steps to notify you (for example, via email or an in-app notice). Continued use of the Service after such changes constitutes your acceptance of the updated policy.

Contact

For questions, requests, or complaints about this Privacy Policy, please contact:

Locupix, LLC (a Delaware limited liability company)
Email: vicente@locupix.com
Headquarters: Houston, Texas, USA