Privacy
Who is responsible
SpeakEasy, the website speakeasy.eyay.studio and the SpeakEasy app, is made by eyay studio in the Netherlands. eyay studio is responsible for your personal data under the General Data Protection Regulation (GDPR). For anything about your data, email hello@eyay.studio.
Without an account
Reading, searching, the notebook and learning work without an account. Using them leaves nothing with us but the technical logs of the services below.
Your account
You sign in with a code we email you, or with Google or Apple. A new email address makes a new account. We keep:
Your email address, when you signed up and last signed in, and the IP address and browser or app of each device you are signed in on.
With Google or Apple, that account’s identifier. Google also passes on your name and profile picture, and Apple may pass on your name. Our sign-in service stores them with your account; SpeakEasy does not show or use them, and never shares them.
Your profile: display name, public handle and the places you choose. Other signed-in people can see it, for example to follow you.
An account needs only an email address; everything else you give is up to you.
What you contribute, and who sees it
Proposals for the dictionary (new words and meanings, corrections, spellings, examples, observations), your notes on them, and the name you want to be credited with, if any. Reviewers and stewards read them. Once published, the text and that name are public on the website. Your email address and account never are.
Answers in Help check words. Reviewers see them together with other people’s answers. The languages and places you pick there, only you see.
Appeals against a decision. Reviewers see them.
Reviews, if you are a reviewer or steward: your decisions and their reasons are kept with your account. The website never shows who decided.
Community posts. What you share with Everyone, everyone who is signed in sees, with your name and the place you entered; what you share with a circle, only its members. The same goes for words you mark with I use this. Circles keep their name, members and invites.
Words you learn while signed in: which word or meaning, and when. Others only see numbers: how many people learned a word (from three people), how many learned what you contributed, and how many words a circle learned this week. Nobody sees who.
Follows, blocks and reports are kept with your account. Stewards see reports, not who sent them.
Area requests and reviewer applications, with the email address you give, also without an account. Stewards read them and may email you.
Stewards can look up an account by name, handle or email address, to give it a role.
When a reviewer decides on your proposal or asks you something, or your appeal is decided, you see it under My contributions and we email you.
On your device
Your notebook (what you keep for Just me, bookmarks and progress), saved meanings, practice history, drafts of contributions and checks, and your language and sound settings stay on your device. So does your sign-in: in the app’s secure storage, or in your browser’s local storage on the web. We don’t copy any of this to our servers, apart from the words you learn while signed in (see above), and SpeakEasy sets no cookies.
Export data from this device, under You (Log in while signed out), gives you a copy of your notebook, saved meanings and practice history. Signing out removes your sign-in from this device. Deleting the app, or this site’s data in your browser, removes the rest.
Emails
We only email you the sign-in codes you ask for, news about your own contributions, and a steward’s answer to your request or application. Sign-in codes and news are sent through Resend and contain no tracking pixels or tracked links.
Services we use
These companies process data for us, on our instructions:
Supabase: our database and sign-in, in Frankfurt, Germany (EU).
Vercel: hosts the website.
Resend: sends our emails.
Supabase and Vercel handle your IP address to do so and keep technical logs for a short time. Google and Apple take part only when you choose to continue with them; for their side, their own privacy policies apply.
The Atlas map loads map tiles from OpenFreeMap, which receives your IP address when you open the map. Read aloud uses your device’s or browser’s own voice.
Supabase, Vercel, Resend, Google and Apple are US companies. Where they process data outside the EU, they rely on the EU-US Data Privacy Framework or the EU’s standard contractual clauses. OpenFreeMap may also process your IP address outside the EU.
What we don’t do
No advertising, no analytics or tracking, and no selling of data. People, not software, decide on contributions.
Why we may do this
Contract: to give you an account and do what you ask SpeakEasy to do, such as signing you in, publishing your contributions and emailing you about them.
Legitimate interest: keeping SpeakEasy safe (limits, logs), reviewing and moderating, and keeping published text with its credit, so the dictionary stays reliable and its history can be checked. You may object; see Your rights.
Consent: the name you want to be credited with, and an email address you add to a request. You can withdraw it at any time.
How long
We keep account data until your account is deleted. You can delete it yourself under You, with Delete account.
That removes your email address, profile, community posts, circles you host (with everything shared in them), follows, blocks and reports, check answers, the words you learned, news about your contributions, and the text of your proposals, notes and appeals.
What was published stays on the website, no longer linked to you. The name you chose as credit stays with it, unless you have it removed when you delete your account, or ask us to remove it.
Requests and applications we keep until you ask us to delete them. Backups and logs of our services can hold your data a little longer, until they expire. Data on your device stays until you remove it.
Your rights
You can ask to see your data, to correct or delete it, to limit its use, to receive it in a form you can take elsewhere, to object to how we use it, and to withdraw consent. Email hello@eyay.studio; we answer within a month, and may ask you to write from your account’s address so we know it is you. Your display name, handle and places you can change yourself under You, where you can also delete your account.
If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Children
SpeakEasy accounts are for people aged 16 and over. When you sign in, you confirm that you are 16 or older. Your device remembers your answer; we don’t receive it.
Changes
When this policy changes, we update this page and the date below.