Privacy notice
Version 2026-11-06
Who we are
This site is operated by [[OPERATOR LEGAL NAME, and registered address or country]] ("we", "us"). For data protection purposes we are the controller of the personal data described here. You can reach us at [[PRIVACY CONTACT EMAIL]].
What we collect
| Data | When | Notes |
|---|---|---|
| Name and email address | You register | Used to create your account and to email you sign-in links. |
| Your choices at sign-up | You register | Whether you want update emails, and the date and version of the privacy notice and terms you accepted. |
| IP address and browser details (user agent) | Sign-up, each sign-in, and the free demo | Used for security, abuse prevention and diagnosing problems. |
| Sign-in and security events | Each sign-in link request and use | Time, IP address and browser details. |
| Quiz and study activity | While you use the site | Which words you were asked or studied, your answers (including what you typed), whether they were right, how long it took, and when. This drives your dashboard, statistics and badges. |
| Your settings | You change them | Dark mode, explanatory notes, feedback pause and pronunciation display, and which dashboard mode you last used. |
| Flags you send | You flag a word | The word and the optional note you write. |
| Demo progress | You try the free demo | A random token, your IP address, browser details and how many questions you answered. No name or email is needed. |
We do not ask for a password, and we do not currently take payments. [[Update this paragraph when paid plans return: payments would be handled by PayPal, and we would not see or store your card details.]]
When someone registers, we also send a short notice (name, email, time, and whether they opted in to updates) to the site operator's email address so new accounts can be approved.
Why we use it
- To provide the service you asked for: your account, sign-in links, quizzes, study mode, progress and badges. [[Legal basis, if you are subject to the GDPR or UK GDPR: performance of a contract.]]
- To keep the site secure and prevent abuse, including limiting repeated sign-in attempts and the free demo. [[Legal basis: legitimate interests.]]
- To understand and improve the site, for example which words are too hard or flagged as wrong. We look at activity in aggregate where we can. [[Legal basis: legitimate interests.]]
- To email you about updates, only if you ticked the box at sign-up. [[Legal basis: consent.]] You can withdraw it at any time by contacting us. We send sign-in and account emails regardless, because the service depends on them.
We do not sell your personal data, and we do not use it for advertising or profiling that has legal or similarly significant effects on you.
How long we keep it
- Account details, settings and your quiz and study history: while your account exists, so your progress is kept. They are deleted when your account is deleted.
- Sign-in links and sessions: short-lived by design; expired records are removed [[after N days]].
- Security events and demo records (IP address and browser details): [[N months]], then deleted.
- Records of the privacy notice and terms you accepted: kept as long as your account exists.
- Backups: encrypted, and removed on a rolling schedule of about [[N days]], so deleted data can persist in them until then.
Your rights
Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, receive a copy in a portable form, object to or restrict some uses, and withdraw consent. To use any of these, or to have your account deleted, email [[PRIVACY CONTACT EMAIL]]. We will reply within [[30 days]]. You also have the right to complain to your data protection authority: [[NAME AND LINK of your supervisory authority]].
Security
Sign-in links are single-use and short-lived; we store only a hash of each link and each session token, never the raw value. Connections use HTTPS. No system is perfectly secure, and we will tell affected users and the authorities where the law requires after a breach.
Age
The site is intended for people aged [[MINIMUM AGE, e.g. 16]] and over. If you believe a younger person has registered, contact us and we will delete the account.
Changes
If we change this notice in a way that matters, we will update the version above, and may ask you to accept it again. [[Decide how you will notify users: email, banner, or both.]]
Contact
[[PRIVACY CONTACT EMAIL]] · [[POSTAL ADDRESS, if required]]
See also our terms of use and the help page.