Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how Roth Media GmbH (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit or use EnglishGrammar.org, including the free content, the grammar course, the Matches, free user accounts, and our emails (collectively, the “Services”).

Controller and Contact Details

The controller responsible for the processing of personal data through the Services is:

Roth Media GmbH
Lorrainestrasse 19
3013 Bern
Switzerland

Personal Data We Collect

We may collect the following categories of personal data:

  • Account data, when you create a free EnglishGrammar account: your email address, your first name if you give it, when the account was created and confirmed, when you last signed in or visited the site while signed in, and your account settings. If your account has a password, we store it only in a scrambled form that cannot be turned back into the password.
  • Sign-in data. We send sign-in links by email instead of asking for a password. Each link is stored as a code that cannot be turned back into the link, together with the time and IP address of the request, and is deleted a week after it expires.
  • Email data: your email address, your first name if we have it, the emails you choose to receive (for example, the weekly exercises email) and, for the weekly exercises, your levels. We record each choice and each unsubscribe with the date, time, place (for example, your account or the page linked from our emails), and IP address, so that we can show when and how you agreed. We also keep when we sent you which email, whether an email to you bounced or was reported as spam, whether you clicked a link in it, when you were last active (a click on a link in one of our emails, opening or saving your email choices, or signing in or visiting the site with your account), and your country.
  • Signups from WordCounter.net, a site we also run: if you ask there to join EnglishGrammar.org, WordCounter sends us your email address, the emails and levels you chose, and when you asked. We email you a link to confirm, and nothing is created or changed until you press its button. If you join from an invitation in one of WordCounter’s emails, its link tells us your email address, and we create your free account, with the emails you choose, only when you press “Join”. If you joined that way while only the emails were offered, we may email you once to offer your free account; it is created only if you press “Create free account” on the page that email links to.
  • Course data. If you mark a lesson of the grammar course as reviewed, we store the lesson and the time of that action with your account. This is a reading record you keep yourself, not an assessment of your English level. Your answers to practice questions are not sent to us or stored.
  • Question reports. If you report a problem with a question of an exercise, we store what you ticked, the answers you had chosen and, if you mark any, the answers you think are correct, together with the exercise, the page, and the time. If you are signed in, the report is linked to your account. If you are not signed in, we store instead a code made from your IP address and browser that changes every day; we do not store the IP address itself.
  • Communications data, such as messages you send to us, support requests, and feedback.
  • Usage and device data, such as IP address, browser type, device identifiers, operating system, language settings, referral URLs, pages viewed, and dates and times of access.
  • Cookie and similar technology data, including information collected through cookies, pixels, tags, and analytics tools.

The exercises and the Matches check your answers in your browser. Your exercise answers are not sent to us (unless you report a problem with a question, as described below), and your Matches results and statistics are kept only in your browser’s local storage on your device.

How We Use Personal Data

We use personal data to:

  • provide, operate, maintain, and improve the Services;
  • create and manage user accounts, send confirmation and sign-in links, and keep your course progress;
  • send the emails you have chosen and service messages, such as confirmation emails, sign-in links, and security notices;
  • keep our email list accurate and our emails useful, for example by seeing which emails readers click and by removing addresses that no longer receive email;
  • understand how the Services are used and improve performance, navigation, and content;
  • check and correct the questions that readers report;
  • detect, prevent, and investigate fraud, abuse, spam, security incidents, and other misuse;
  • comply with legal, tax, accounting, and regulatory obligations;
  • establish, exercise, or defend legal claims.

Legal Bases for Processing

Where EU, EEA, UK, or similar data protection laws apply, we rely on one or more of the following legal bases:

  • Performance of a contract, for example to create and run your account, send sign-in links, keep your course progress, and respond to your requests.
  • Consent, for example for the emails you choose and for non-essential cookies or analytics where consent is required.
  • Legitimate interests, for example to secure the Services, keep bots and abuse out of our forms, keep our email list accurate, see which of our emails are useful to readers, check and correct the questions readers report, administer our business, and improve our systems and content, provided those interests are not overridden by your rights.
  • Compliance with legal obligations, for example accounting, tax, fraud prevention, and mandatory disclosure obligations.

How We Share Personal Data

We may share personal data with:

  • hosting providers, cloud providers, and IT support providers;
  • Cloudflare, which delivers and protects the website, tells our website the country each visit comes from, and whose Turnstile service checks that our signup and sign-in forms are used by people rather than bots;
  • email delivery providers that send our emails on our behalf, in particular Amazon Web Services (Amazon SES, in the United States), which delivers our emails and tells us when an email bounces or is reported as spam;
  • analytics providers, including Google Analytics;
  • professional advisers such as lawyers, accountants, auditors, and insurers;
  • courts, regulators, law enforcement, or other authorities where required by law or to protect our rights.

We require service providers to process personal data only on appropriate instructions and with appropriate safeguards where applicable.

International Data Transfers

We may process personal data in Switzerland and in other countries where we or our service providers operate, including countries outside the European Economic Area, the United Kingdom, or Switzerland.

Where applicable law requires it, we use appropriate transfer mechanisms and safeguards for international transfers. Where personal data is transferred from the EU or EEA to Switzerland, such transfer may rely on the European Commission’s adequacy decision for Switzerland. For onward transfers to other countries, we may rely on standard contractual clauses or another lawful transfer mechanism used by the relevant provider.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the Services, remember preferences, keep users signed in, measure performance, and understand how visitors use the site.

Some cookies are strictly necessary for the operation of the Services, for example the cookies that keep you signed in to your account. When you confirm a new account, a short-lived cookie (ten minutes) lets us count the new account once in our statistics. When you open the page for your email choices from a link in one of our emails, or from an invitation in one of WordCounter’s emails, a cookie (two hours) holds the code from the link, so that the code does not stay in the page’s address. Non-essential cookies, including analytics cookies, will be used only where permitted by applicable law and, where required, only after your consent.

You can manage cookies through your browser settings and, where available, through our cookie settings tool or banner. Disabling cookies may affect site functionality.

Google Analytics

We use Google Analytics to understand how visitors use the Services and to improve content, navigation, and performance.

Google Analytics may collect information such as pages visited, interactions with content, device and browser data, IP-related information, and approximate location data derived from technical information. When a new account is created, we report that event together with the part of the site where the signup started (for example, the home page or the course). We do not send your email address or name to Google Analytics.

Where required by law, Google Analytics is activated only after you provide consent to analytics cookies. You can withdraw your consent at any time through our cookie settings.

Emails and Newsletters

When you create an account, you choose which emails you would like to receive, for example the weekly exercises email. We use your email address and first name to send the emails you have chosen. We send them with our own email system, which runs on our website, through Amazon SES. Amazon SES tells us when an email bounces or is reported as spam, so that we stop sending to that address.

Until October 2026, our weekly newsletter was sent with GetResponse. We have moved it to our own email system, together with the email addresses, first names, and signup dates of its subscribers, so that they keep getting the emails they signed up for.

Links in our emails lead through our website first: it notes that you clicked a link in that email, then opens the page at once. Links to our websites also carry tags that let Google Analytics count the visits that come from our emails; these tags are the same for everyone and do not identify you.

We note when you were last active (a click on a link in one of our emails, opening or saving your email choices, or signing in or visiting the site with your account), so that we can see who still reads our emails. We also note your country: the one your connection comes from, as Cloudflare reports it, when you sign in, visit the site with your account, or save your email choices, or, for addresses that came from GetResponse, the one GetResponse noted. We do not note your location beyond the country.

You can change your email choices at any time on your Account page or on the page linked from every one of our emails, unsubscribe by using the link in any of our emails, or contact us via the contact page. Confirmation emails, sign-in links, and other messages about your account are always sent, because the account needs them.

Reporting a Problem with a Question

After you answer a question in one of our exercises, you can report a problem with it, for example that the answer marked correct is wrong. You tick what is wrong and, if you like, mark the answers you think are correct. There is no text field, so a report contains nothing you type.

If you are signed in, your report is linked to your account, so that it counts only once and the question shows you that you reported it. If you are not signed in, we use the daily code described above only to count your report once and to limit how many reports can be sent.

Retention of Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including for legal, accounting, tax, reporting, and dispute-resolution purposes.

  • Account and course data: for as long as your account exists. When you delete your account, your account data, email data, and course progress are deleted. We keep only a one-way code of your email address, so that it cannot be added back to our email list by mistake. If emails to your address bounce, we delete your account once the address has bounced for 30 days and you haven’t signed in or visited the site for 30 days.
  • Sign-in links and unconfirmed signups: the stored codes are deleted a week after the link expires.
  • Email data: until you unsubscribe or withdraw your consent. After you unsubscribe, we keep your email address marked as unsubscribed so that we do not email you again, unless you ask us to delete it. If emails to your address bounce or you report one as spam, we delete your address from our list 30 days later (an account’s address as described above). The list of which emails we sent you, and whether you clicked a link in them, is deleted after 90 days. If you ask us to delete your data, we keep only a one-way code of your email address, so that it cannot be added back by mistake.
  • Question reports: until we have dealt with the reported question, and then for six months. If no one else reports the same question within six months of a report from a reader who is not signed in, that report is deleted then. When you delete your account, your reports are kept for these periods without any link to you.
  • Records of past purchases: Pro subscriptions are no longer sold. If you bought one in the past, we keep the related records for as long as Swiss accounting and tax law require.
  • Support and correspondence data: for as long as reasonably necessary to handle your request and maintain business records.
  • Cookie and analytics data: for the lifespan of the relevant cookies and the retention settings configured in the relevant analytics tools, subject to applicable law.

Your Rights

Depending on the law that applies to you, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive your data in a portable format where applicable;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with a competent supervisory authority, including the Swiss Federal Data Protection and Information Commissioner or, if applicable, your local data protection authority in the EU, EEA, or UK.

You can delete your account yourself on your Account page at any time. To exercise your other rights, find our contact details at the end of this page.

Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure.

However, no website, network, or method of electronic transmission or storage is completely secure.

Children

The Services are intended for a general audience and are not specifically directed to children under 13. We do not knowingly collect personal data from children under 13 without appropriate authorization where required by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.

Contact

For privacy questions or requests, contact:

Roth Media GmbH
Lorrainestrasse 19
3013 Bern
Switzerland
Email