Privacy statement

Last updated: 2026-10-31

Who are we?

Lurndo is a free learning platform for learning SQL and Excel. The data controller is [name of the operator], [address]. You can reach us at [e-mail address].

Playing without an account

Without an account we store nothing about you on our servers. Your progress (points, streak, finished lessons and settings) is kept only in your own browser's storage. Your queries run entirely in your browser.

We use no tracking cookies and no advertising.

With an account

If you create an account, we store your e-mail address (to sign you in), a nickname of your choice for the leaderboard, your progress and your points per week and per day (for the last week). If you sign in with Google, Google only gives us your e-mail address and name; we don't use your name.

Legal basis: performing the service you ask for (article 6.1.b GDPR). On the leaderboard others only see your nickname and your points for this week and for today, never your e-mail address.

If you request a certificate after the whole course, we store the name you put on it and the date. Anyone with the link or code of your certificate can see that name and date, so it can be verified. Your e-mail address stays private then too.

Statistics

To improve the lessons, we count anonymously how often lessons are started and finished and where players often make a mistake. This happens without cookies and without you being identifiable, with [Plausible or Umami].

Who processes your data?

Supabase stores the accounts and progress, in a data centre in the European Union.

Vercel hosts the website.

OpenAI writes the explanation when you tap "Why isn't it right?". We then only send the exercise and your query, never your name, e-mail address or IP address. To limit abuse we count per IP address and per account how many explanations are requested.

We have a data processing agreement with each of them. Your data is not sold or shared for advertising.

How long?

For as long as your account exists. If you delete your account, your e-mail address, nickname, progress, points and certificate disappear immediately and for good. Backups are overwritten after 30 days at most.

Your rights

You have the right to access, correct, transfer and erase your data. You delete your account yourself on the account page; for the other rights, send us an e-mail.

If you are not happy with how we handle your data, you can lodge a complaint with the Data Protection Authority (Belgium) or the Autoriteit Persoonsgegevens (the Netherlands).