the fine print

Privacy Policy

Last updated 2 November 2026. Draft text for development; have it reviewed before launch.

We collect the minimum needed to run the service.

What we store

  • Account: your username, or the name and email from your Google account if you use Google sign-in. Passwords are never sent to or stored by us in readable form; we keep only a keyed hash of a value derived in your browser.
  • Study data: your answers, bookmarks, test results and reading progress.
  • Security data: session records (IP address, browser, expiry) and an audit log of sensitive account events.
  • Purchases: order and payment references from Stripe. We never see your card number.

How we use it

To sign you in, keep one active session per account, deliver the content you purchased, show your progress, prevent abuse and handle support requests.

Sharing

We use Cloudflare to host the service and store data, Stripe to process payments, and Google if you choose Google sign-in. We do not sell your data.

Cookies

We use a strictly necessary, HttpOnly session cookie to keep you signed in. No advertising cookies.

Your choices

You can change your password or sign out anytime. To request deletion of your account and data, contact support.