Privacy Policy

Lacuna is a vocabulary-learning service operated at trylacuna.com. This Privacy Policy explains what information we collect when you use Lacuna, how we use it, who we share it with, and the rights you have over your data. Questions? Email support@trylacuna.com.

• Account information. When you sign up, we receive your email address (and, if you sign in with Google, your name and profile picture) from our authentication provider.
• Usage data. Word lists you submit, generated sentences, your typed answers, whether they were correct, and the time taken — used to power your progress tracking.
• Subscription information. If you subscribe to Lacuna Pro, our payment processor (Stripe) collects your payment details. We never see or store your card number. We receive only a customer ID and subscription status.
• Technical data. IP address, browser type, and access timestamps in standard web server logs. A signedlacuna_anon cookie is set to support rate limiting.

• To generate fill-in-the-blank questions from your word lists.
• To track your progress (accuracy, mastery, attempt history) so it persists across sessions and devices.
• To enforce free-tier trial limits and prevent abuse.
• To process subscription payments and manage your account.
• To respond to support requests and operational notices about your account.

We do not sell your personal information. We do not use your word lists, answers, or progress data to train AI models, and we do not share them with third parties for advertising.

To operate Lacuna we send the minimum data necessary to the following third-party services, each governed by their own privacy policies:

• Clerk — authentication and account management (receives email, name, sign-in events).
• Anthropic (Claude API) — generates literary sentences from your word lists for paid users. Per Anthropic's data policy, prompts are not used to train their models.
• Self-hosted Ollama — free-tier sentence generation runs on infrastructure we control. Word lists never leave our systems.
• Stripe — payment processing for Lacuna Pro subscriptions.
• Neon (Postgres) — encrypted database hosting for account records and progress data.
• Upstash (Redis) — short-lived rate-limit counters.
• Vercel — application hosting and edge delivery.

We use a small number of cookies, all functional:

• Clerk session cookies — keep you signed in.
• lacuna_anon — a signed identifier used for rate limiting.
• localStorage — your word lists, in-progress questions, and a local copy of your attempts. Stored only in your browser; we don't read it server-side.

We do not use third-party advertising or analytics cookies at this time. If that changes, this policy will be updated.

Account information and progress data are kept for as long as your account exists. If you delete your account (email support@trylacuna.com), we delete your records from our database within 30 days. Server access logs are kept for up to 90 days for security and debugging.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. We honor these rights regardless of jurisdiction. To exercise any of them, email support@trylacuna.com from the address on your account.

Lacuna is not directed to children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we will remove the account.

Lacuna's service providers may process your data in the United States and other jurisdictions. By using the service, you consent to this transfer. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page. Continued use of Lacuna after a change constitutes acceptance of the revised policy.

For privacy questions, data requests, or concerns: email support@trylacuna.com.