Privacy

Last updated: 28 April 2026

Sentiero is built by a small team. We collect the minimum we need to run the product and we do not sell or share your data. This page explains, in plain language, what we collect, why, and how to make us delete it.

Who we are

Sentiero is operated as a personal project. The data controller for the purposes of GDPR is the project operator. Contact: hello@sentierolingua.com.

What we collect

1. Waitlist signup

The email address you submit.
Your interface locale (no / en) — so we can write you back in the right language.
A coarse source tag (e.g. which page or campaign referred you).
The HTTP Referer header, when your browser sends one.
A SHA-256 hash of your IP address (salted with a server-side secret) — used to rate-limit signups. We do not store the raw IP.
Your User-Agent string — used to debug problems.
Timestamp of signup.

2. Application use (when accounts are live)

Your username and a hashed password (we never store the password itself).
Your learner state — what you've practised, what you've struggled with, your progress on the path. This is what makes the app personalised.
Anonymous "visitor" identifiers in your browser's localStorage so the demo on the marketing page works without an account.

3. Speech recordings

If you use the speaking practice (planned for paid features), short audio clips are processed on our server, scored, and either discarded immediately or stored against your account so you can listen back. You can delete recordings at any time. Audio is never used for advertising, never sold, and never used to train models without explicit consent.

4. Cookies and analytics

We do not currently use third-party advertising cookies or cross-site trackers. We may use a privacy-friendly first-party analytics service (e.g. Plausible or self-hosted equivalent) that does not set cookies and does not collect personal data. We do not use Google Analytics, Facebook Pixel, or similar.

Why we collect it

Waitlist: joining is a single opt-in (you submit your email on the form). We do not send a separate “confirm your subscription” message unless we add double opt-in later—if we do, this page will be updated.

Run the service — without the basics above we can't show you scenes, save your progress, or invite you off the waitlist.
Personalise your learning — your reveal history and produced sentences shape what content you see next. This is the whole point of the product.
Defend against abuse — hashed-IP rate-limiting prevents spam signups.

Who we share with

Currently: nobody. When we wire payment, we will use Stripe to process cards (Stripe receives only the data needed to charge you, and is bound by their own GDPR-compliant terms). When we wire transactional email (verification codes, beta invites), we will use a transactional email provider such as Resend or Postmark. We will update this page when those go live.

Where data lives

Data is stored on servers in the EU (or, occasionally, US-based infrastructure with EU data-protection clauses such as Standard Contractual Clauses). The exact host is listed on the Imprint page when known.

Your rights (GDPR)

You have the right to:

Access — ask what we hold about you.
Rectification — correct it if it's wrong.
Erasure — ask us to delete your account, your waitlist entry, and your learning history.
Portability — get a copy of your data in a machine-readable form.
Object — to any processing you don't agree with.
Complain — to your local data protection authority (in Norway, Datatilsynet).

To exercise any of these rights, write to hello@sentierolingua.com. We will respond within 30 days.

Retention

Waitlist emails: kept until you ask us to delete, or until two years after your last interaction, whichever is sooner.
Account data: kept while your account is active and for 90 days after deletion (then permanently removed, except minimal records we legally must keep, e.g. invoices).
Anonymous analytics: aggregated, not linked to you, kept indefinitely.

Children

Sentiero is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a minor has registered without parental consent, contact us and we will delete the account.

Changes

We may update this page as the product evolves. Material changes will be announced by email to active accounts and waitlist subscribers.