Privacy

Hussein Al-Bayati, Böcklerstraße 3, 10969 Berlin, Germany, email: Hussein_Bayati@outlook.de.

Bayati is a private, non-commercial project. There is no data protection officer; none is required.

This policy covers the website bayati.org and the web app app.bayati.org. Both consist of static files without a server of our own; account data is stored with the service named below.

The website and the app are delivered by Cloudflare Pages (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data: IP address, time, requested file, browser and operating system. This is needed to deliver the pages and to fend off attacks; Cloudflare keeps this data only as long as operation and security require. We ourselves receive no personal access logs and keep no visitor statistics.

The legal basis is our legitimate interest in secure and fast delivery (Art. 6(1)(f) GDPR). Cloudflare processes the data on our behalf; transfers to the USA rely on the EU-US Data Privacy Framework, under which Cloudflare is certified, and on standard contractual clauses.

We set no analytics or advertising cookies and embed no third-party services. Fonts and maths typesetting are served from our own site; no data is sent to font providers.

Your browser stores locally (localStorage) only what is needed to use the site: your choice of light or dark mode and, in the app, your login so you stay logged in. This data is never sent to us and disappears when you log out or clear the site data in your browser.

Accounts are managed by Supabase (Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992); the database is located in Frankfurt, Germany (Amazon Web Services, region eu-central-1). For an account we store: email address, password as a hash, grade and language, optionally a first name and a nickname for duels, the exercises you worked on with result and duration, your progress, submitted tests and starred formulas. This data is needed to continue learning across devices.

Bayati is currently in closed beta: we create accounts on request only and hand over address and password personally. Later, you will log in with a code sent by email; Supabase then also processes your email address to send that code.

The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR). Supabase processes the data on our behalf.

Bayati is made for pupils. For children under 16 we only create an account with the consent of a parent (Art. 8 GDPR).

Account data is kept until the account is deleted. You can do that yourself at any time in the app under Profile → “Delete my data”; this immediately and permanently removes the account, progress, tests and starred formulas from the database. You can also request deletion by email.

We do not pass data on to third parties and do not sell data. Only the named providers Cloudflare and Supabase process data on our behalf, bound by our instructions.

You have the right to access the data stored about you, to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Write to the email address above.

You may also lodge a complaint with a data protection supervisory authority, for example the authority of the German state you live in.

When Bayati gains new features, such as logging in with Apple or Google or a premium purchase, we will update this policy. The version published here always applies.

Last updated: 4 November 2026