Privacy
The short version: Morse Lab runs on your device. Without an account, your progress never leaves the browser. There are no analytics tools, no ad networks, and no fonts loaded from someone else's server.
The German version is the legally binding one.
Controller
Erik Emmer, Tegernseer Str. 2, 83607 Holzkirchen, Germany. Email: [email protected].
What stays on your device
Your progress — which characters you know, accuracy, reaction times, settings — lives in your browser's storage. It is not transmitted unless you create an account. You can delete it yourself at any time by clearing this site's data in your browser.
What happens when you load the page
The site is served by Cloudflare Pages (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). In doing so, Cloudflare processes technically necessary connection data: IP address, time, requested address, amount of data transferred, and browser and operating-system identifiers. The purpose is delivering the page and defending against attacks; the legal basis is the legitimate interest in a working, secure service (Art. 6 (1) (f) GDPR). Cloudflare acts as a processor; transfers to the USA are covered by Standard Contractual Clauses and certification under the EU-US Data Privacy Framework.
The optional account
You can create an account to sync your progress between devices. It uses passkeys (WebAuthn): there is no password, no email address and no name. What is stored: a random account identifier, your passkey's public key with its identifier and counter, and your learning progress. The legal basis is performance of this service (Art. 6 (1) (b) GDPR). The data lives in a Cloudflare D1 database in the Western Europe region.
Signing in keeps one technically necessary cookie (HttpOnly, SameSite=Lax). It serves the session only, not analytics; the session identifier is stored on the server as a hash.
Deleting
In the account settings, "Delete account" removes the account and all associated data immediately and completely. An email to the address above works too.
What does not happen here
No analytics or tracking tools. No advertising. No sharing with third parties beyond the delivery described above. No automated decisions with legal effect. The training adapts to your performance, but that is a learning method computed on your device — it judges characters, not people.
Your rights
Access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You may also lodge a complaint with a data protection authority.
Changes
Last updated: 3 September 2026. If what is processed changes, this page changes with it.