noelty.

Privacy Policy

Last updated: May 16, 2026

Noelty is operated by Maksim Filippovskii as an individual. This Privacy Policy explains what data we collect, why we collect it, how it is used, and what rights you may have regarding your data.

1. What we collect

We may collect the following types of information:

  • Analytics data — page views, feature usage, and interaction events collected only after you give cookie consent. Analytics are associated with a first-party lt_cid cookie with a 1-year expiration that anonymously identifies a browser session.
  • Lesson and session data — temporary lesson state, lesson responses, interaction progress, and token-based session identifiers required to provide the service functionality. Students may access lessons through unique tokenized links without creating an account.
  • Email address — if you submit the feedback or support form. Used only to respond to your message.
  • Google OAuth data — your name and email address if you sign in using Google OAuth. Used only for authentication and account access.
  • Automatically collected technical data — IP address, browser type, device information, timestamps, request paths, and basic diagnostic information collected automatically by the server for security, abuse prevention, and debugging.

2. Why we collect it

We process data for the following purposes:

  • Analytics — to understand product usage and improve features and usability.
  • Authentication — to securely authenticate users and maintain accounts.
  • Service delivery — to provide lesson functionality, maintain active sessions, and synchronize lesson progress.
  • Support — to respond to feedback, support requests, and inquiries.
  • Security — to prevent abuse, investigate suspicious activity, maintain system integrity, and debug technical issues.

3. Legal basis for processing (GDPR)

If you are located in the EEA or UK, we process personal data under the following legal bases:

  • Consent — for analytics cookies and optional analytics tracking.
  • Legitimate interests — for security logs, fraud prevention, debugging, abuse prevention, and customer support.
  • Contractual necessity — when processing data required to provide the Noelty service, including authentication and lesson functionality.

4. Third-party services

We share data with trusted third-party providers only where necessary to operate the service:

  • Google — OAuth authentication. Governed by Google's Privacy Policy.
  • Lemon Squeezy — payment processing for subscriptions and optional support payments. Payment information is processed entirely by Lemon Squeezy; we do not store payment card details.
  • Buy Me a Coffee — optional support platform available through the Support page.
  • YouTube — embedded videos may set cookies or collect usage data according to YouTube's policies. We use privacy-enhanced embeds where reasonably possible.
  • Hosting and infrastructure providers — server and infrastructure providers may process technical and log data necessary to deliver the service securely.

5. International data transfers

Some third-party providers may process or store data outside your country of residence, including in the United States and other jurisdictions. Where applicable, we rely on safeguards provided by those providers for international data transfers.

6. Cookies

Noelty uses a non-essential analytics cookie named lt_cid. This cookie is only set after you provide consent through the cookie banner.

You may withdraw consent at any time by:

  • Clearing your browser cookies or local storage.
  • Blocking cookies in your browser settings.
  • Declining cookies when visiting the site on a new browser or device.

7. Data retention

  • Analytics events — retained for up to 12 months.
  • Server logs and technical diagnostics — retained for up to 30 days.
  • Account data — retained until you request deletion or your account is removed.
  • Temporary lesson and session data — retained only as long as necessary to provide the service and maintain lesson functionality.

8. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, misuse, or destruction. However, no internet-based service can guarantee absolute security.

9. Children and educational use

Noelty may be used in educational environments by teachers and students. Teachers and lesson creators are responsible for ensuring lawful use of the service, including when lessons involve minors.

The service is not intended for children under 13 without supervision or authorization from a parent, teacher, or educational institution where required by applicable law.

10. User-generated content

Teachers and users are responsible for the legality of any content, lesson material, text, images, or other data they upload or share through the platform.

11. Your rights (GDPR)

If you are located in the EEA or UK, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion.
  • Withdraw consent for analytics processing.
  • Object to certain processing activities.
  • Request data portability.
  • Lodge a complaint with your local data protection authority.

To exercise your rights, contact: mafilippovskiy@gmail.com

We will respond within a reasonable period and generally within 30 days where required by law.

12. Contact

Maksim Filippovskii
Email: mafilippovskiy@gmail.com