Typo3
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
A CMS shop site: logs, cookies, and YouTube; rights by email; undated policies and little said about AI.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Form entries plus technical logs: browser, OS, IP, referrer, time, and cookies.
Read the exact line
Privacy policy
“Our IT systems automatically record other data when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed).”
Training
They say data is used to run the site and may be used to analyse how you browse.
Read the exact line
Privacy policy
“A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyse your user patterns.”
Sharing
Playing a YouTube video can send data to Google; they also name a German operator.
Read the exact line
Privacy policy
“Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.”
Kept
Customer data is said to be deleted when an order or business relationship ends, plus legal holds.
Read the exact line
Privacy policy
“The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.”
Controls
You can ask them by email to see, fix, block, or delete data and to object to analysis.
Read the exact line
Privacy policy
“You also have the right to demand that your data are rectified, blocked or eradicated. Please do not hesitate to contact us at any time under the address disclosed in section “Information Required by Law””
Fine print
Shop terms include a 14-day cancellation right for many products; policies have no date.
Read the exact line
Terms of service
“You have the right to revoke this contract within 14 days without giving any reasons. The period of revocation is 14 days from the day on which you, or a third party designated by you”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Object to analysis or revoke consent by email
Contact the address in “Information Required by Law” / : b13 GmbH, Breitscheidstraße 65, 70176 Stuttgart
Ask to see, fix, block, or delete your data
Email or write the listed in the privacy declaration
Block or delete cookies in your browser
Browser cookie settings as described in the Cookies section
Revoke a shop order within 14 days
TYPO3 GmbH, revocation@typo3.com or the postal/fax details in the terms
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you play an embedded video, Google/YouTube may collect data and they say they cannot control that.
Read the exact line
Privacy policy
“Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.”
For example, clicking play on a conference talk could send your IP and viewing data to Google.
They may use cookies and analysis tools to study how people use the site.
Read the exact line
Privacy policy
“There is a possibility that your browsing patterns will be statistically analysed when your visit our website. Such analyses are performed primarily with cookies and with what we refer to as analysis programmes.”
For example, a cookie could record which pages you open so they can see popular docs.
Every visit stores technical details including your IP address in server logs.
Read the exact line
Privacy policy
“The information comprises: The type and version of browser used The used operating system Referrer URL The hostname of the accessing computer The time of the server inquiry The IP address”
For example, opening the homepage records your IP, browser, and the page you came from.
They warn that email and internet traffic are not fully safe.
Read the exact line
Privacy policy
“We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.”
For example, a contact-form email could theoretically be intercepted in transit.
If they cancel a training, they say they will not pay extra costs like travel or lost work.
Read the exact line
Terms of service
“There is no claim for compensation of travel and accommodation costs as well as loss of work. There is no for indirect damages, especially loss of profit or claims of any third parties.”
For example, if a course is cancelled for illness, you may not get hotel or flight money back from them.
For extended support, breaking their source-code rules can end the contract.
Read the exact line
Terms of service
“Violating these rules will end the agreement.”
For example, sharing a private ELTS patch could cut off your support access.
They say they delete customer data when the deal is over, unless the law says keep it.
Read the exact line
Privacy policy
“The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.”
For example, after a shop order finishes they still might keep invoices because tax law requires it.
Fonts are stored on their site so loading pages should not ping Google for fonts.
Read the exact line
Privacy policy
“These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.”
For example, viewing a page should not send a font request to Google just to show text.
They use HTTPS so form data in transit should be encrypted.
Read the exact line
Privacy policy
“If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.”
For example, a contact form submitted over https should not be readable as plain text on the wire.
EU-style cooling-off: you can cancel many product orders within two weeks.
Read the exact line
Terms of service
“You have the right to revoke this contract within 14 days without giving any reasons.”
For example, you can return merchandise within 14 days of receiving it and ask for a refund.
Words to know
Legal words from the lines above, in plain English.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
How we got here · grade D · score 36/100 · 13 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect form data you send plus automatic technical data such as browser, OS, referrer, hostname, time, IP, and cookies.
Does it record your voice, face or body, and what happens to that?
The documents do not describe recording voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They may analyse browsing with cookies and tools, and YouTube can process data if you play a video.
Do they sell or share your data, and can you opt out?
They name site operators and tools such as YouTube; they do not say they sell personal data. Fonts are local so Google is not contacted for fonts.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
They say customer data is deleted when an order or relationship ends, and you can demand eradication by contacting them. No in-app delete timer is given.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe SSL/TLS encryption and warn that internet email is not fully secure. No audit or leak history is given.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Neither document includes a last-updated date or a clear advance-notice rule for policy changes.
Can they close your account without warning, and can you get your data out first?
ELTS says violating source-code rules will end the agreement. Training terms let them exclude people and keep the fee. General shop accounts are not fully described.
If something goes wrong, who pays?
Shop defects follow statutory rules, but training terms disclaim travel costs, lost work, and indirect damages.
Do subscriptions renew on their own, and can you get a refund?
They mention recurring card and SEPA payments via Stripe and a 14-day statutory revocation for many products. Auto-renew notice and subscription refunds are not fully spelled out.
The privacy policy is 2,340 words at a fairly hard level (Flesch reading ease 51.1); the terms are 3,211 words at a fairly hard level.
