Privacy Policy

Without an account. You can read every text and the first lesson without telling us anything. Your saved words, completed lessons and reading history are stored only in your own browser (local storage) and are not sent to us.

With an account. When you create an account we store:

• your email address and a securely hashed password, or the sign-in links we email you; if you continue with Google, Google shares your name, email address and profile picture with us, and we never see your Google password;
• if you add a passkey, its public key and the date you last used it; the private key never leaves your device or password manager;
• the words you save, the lessons you complete or open, your place in each text, and the words you look up, so they are available on any device.

If you subscribe to Pro. Payment is handled by Stripe; we never see or store your card details. Stripe tells us whether your subscription is active and when it renews, and we store that with your account.

When you contact us. The name, email address, topic and message you send through the contact form.

Usage analytics. We use Vercel Web Analytics to count page views. It does not use cookies and does not identify individual visitors; it records aggregate data such as the page visited, referrer, country, browser and device type.

• to provide the site and keep your progress in sync across devices;
• to sign you in and send account emails such as confirmation and sign-in links;
• to provide Pro to subscribers and manage billing;
• to answer messages you send us;
• to understand which pages are used, so we can improve the texts and lessons;
• to keep the site secure and comply with the law.

We do not sell your personal information, show advertising, or use your data to build marketing profiles.

We do not use advertising or tracking cookies. The site uses your browser's local storage to keep your saved words, progress and sign-in session. You can clear it at any time in your browser settings; signing out also removes your reading history from that browser.

We rely on a small number of service providers, each of which processes data only to provide its service to us:

• Supabase stores accounts, reading progress and contact messages, and sends account emails;
• Stripe processes Pro payments as merchant of record, including tax, under its own privacy policy;
• Google signs you in if you choose Continue with Google;
• Vercel hosts the site and provides cookieless page-view analytics;
• Google Fonts serves the site's typefaces, which means your browser requests them from Google.

These providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Account data is kept until you delete your account. Messages you send us are kept for as long as needed to deal with your enquiry. Analytics data is aggregated and does not identify you.

Depending on where you live (including under the GDPR, UK GDPR and California law), you may have the right to access, correct, export or delete your personal information, to object to or restrict its use, and to complain to your local data protection authority. To make a request, contact us. We will respond within the time the law requires.

Data is sent over encrypted connections. Account data is protected by row-level security, so each reader can reach only their own records. No system is perfectly secure, but we take reasonable measures to protect your information.

The site is intended for readers aged 13 and over. Children under 13 should not create an account. If you believe a child under 13 has given us personal information, contact us and we will delete it.

If we change this policy we will update the date above, and for significant changes we will notify account holders by email. For any question about your privacy, contact us.