Privacy Policy

1. Who is responsible for your data

Black Screen English LLC is the data controller for personal data collected through this website.

• Legal entityBlack Screen English LLC
• State of formationWyoming
• Registered address30 N. Gould Street Suite R, Sheridan, WY 82801, USA
• Privacy contactbahy@blackscreenenglish.com

2. What we collect

a. Account information

If you create an account to access a paid course, we collect your name and email address, plus a password that is stored in encrypted form. Accounts are managed on our behalf by Outseta, our membership platform.

b. Purchase information

When you buy a course we receive a record of the transaction: which course you bought, the amount, the date, the currency, and a payment reference. We also receive the country your card was issued in, because we may need it for tax purposes.

We never receive your full card number, expiry date or CVC. Those are entered directly into Stripe's payment form and never pass through our systems.

c. Course progress

As you work through a course, the site records which lessons you have completed, your exercise answers and your scores. This is stored in your browser's local storage, on the device you are using. It is not sent to us and we cannot see it.

A practical consequence: if you clear your browser data, use private browsing, or switch to a different device or browser, your progress will not follow you. That is a side effect of keeping it entirely on your machine.

d. Technical information

Like every website, ours is served by infrastructure providers that automatically log basic technical data in order to deliver pages and audio files to you. This typically includes your IP address, browser type, device type, the page requested and a timestamp. These logs are held by our providers (listed in section 7), used for delivery, security and abuse prevention, and are not used by us to build a profile of you.

e. Messages you send us

If you email us, we keep your message and our reply so we have a record of the conversation and can help you properly if you write again.

3. What we deliberately don't collect

To be explicit, this website does not use:

• Google Analytics or any other web analytics product;
• advertising or remarketing pixels (Meta, TikTok, Google Ads or similar);
• cross-site tracking cookies or third-party advertising cookies;
• session recording, heatmap or mouse-tracking tools;
• data brokers or enrichment services.

We also do not sell, rent, trade or share your personal data with anyone for marketing purposes.

4. Local storage, not cookies

We do not set tracking cookies. What the site uses is local storage, which is a small area of your own browser that a website can write to.

We use it for two things only:

• remembering your progress, answers and scores inside a course;
• remembering interface preferences such as your theme choice.

Local storage is not transmitted to a server the way cookies are, and it is not readable by other websites. You can clear it at any time through your browser's "clear browsing data" settings — this will erase your saved course progress.

Our login provider, Outseta, may set a cookie that is strictly necessary to keep you signed in. Stripe may set cookies that are strictly necessary for payment security and fraud prevention. These are essential to the service working and are not used for advertising.

5. Why we use your data

• To give you access to the course you paid for, and to check that you are entitled to it.
• To take payment and to issue receipts.
• To support you when you contact us with a question or a problem.
• To send service messages, such as a purchase confirmation or a notice that your 12-month access is about to end.
• To meet legal and tax obligations, such as keeping records of sales.
• To keep the site secure and prevent fraud or account sharing.

We only send marketing email if you have specifically opted in, and every marketing email includes an unsubscribe link.

6. Legal basis (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are:

• Performance of a contract — creating your account, giving you access and taking payment.
• Legal obligation — keeping tax and accounting records.
• Legitimate interests — securing the site, preventing fraud and abuse, and answering your support messages.
• Consent — optional marketing email, which you can withdraw at any time.

7. Third parties we rely on

We keep the number of external services deliberately small. These are all of them:

• NetlifyHosts the website. Sees your IP address in standard server logs. Privacy policy
• Bunny.netDelivers audio files and media. Sees your IP address when a file is requested. Privacy policy
• OutsetaHandles accounts, login and course access. Stores your name, email and purchase records. Privacy policy
• StripeProcesses payments. Handles your card details directly; we never receive them. Privacy policy
• Google FontsServes the two typefaces used on the site. Sees your IP address when a font is loaded. Privacy policy

We do not give any of these providers permission to use your data for their own marketing.

8. International transfers

Black Screen English LLC is based in the United States, and the providers listed above may store or process data in the United States and other countries.

If you are in the EEA or UK, this means your data may be transferred outside your home region. Where that happens, our providers rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

9. How long we keep things

• Account data — for as long as your account is open. If you ask us to delete it, we remove it within 30 days.
• Purchase and tax records — retained for as long as tax and accounting law requires, typically up to 7 years. We cannot delete these earlier, even on request, because we are legally required to keep them.
• Support emails — normally up to 2 years.
• Course progress — held on your own device until you clear your browser data. We hold no copy.
• Server logs — held by our hosting and CDN providers for their own short retention periods, typically a matter of days or weeks.

10. Your rights

Depending on where you live, you may have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct anything that is inaccurate;
• ask us to delete your data (subject to the tax records above);
• object to or restrict certain processing;
• receive your data in a portable format;
• withdraw consent to marketing at any time.

If you are a California resident, you additionally have the right to know what personal information is collected and to opt out of its sale — noting that we do not sell personal information. We will not discriminate against you for exercising any of these rights.

To exercise any right, email bahy@blackscreenenglish.com. We will respond within 30 days. We may need to confirm your identity first, usually by replying from the email address on your account.

11. Children

Our courses are intended for adults and older teenagers preparing for exams or improving their English. They are not directed at children under 13.

We do not knowingly collect personal data from children under 13 (or under 16 in regions where that is the applicable threshold). If you believe a child has given us personal data, please contact us and we will delete it.

12. Security

The whole site is served over HTTPS. Passwords are handled and stored by Outseta in hashed form; we never see them. Card data is handled entirely by Stripe, which is PCI-DSS certified.

No system is perfectly secure, but because we deliberately hold very little personal data, the amount that could ever be exposed is small. If a breach occurs that affects your rights, we will notify you and the relevant supervisory authority as required by law.

13. Changes to this policy

If we change this policy, the "Last updated" date at the top will change. If a change is significant — for example if we ever start using analytics — we will say so clearly on the site before it takes effect.

14. Contact and complaints

For any privacy question, email bahy@blackscreenenglish.com.

If you are in the EEA or UK and you are not satisfied with our response, you have the right to complain to your national data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve it with you first.