the fine print
Privacy Policy
Last updated 2 November 2026. Draft text for development; have it reviewed before launch.
We collect the minimum needed to run the service.
What we store
- Account: your username, or the name and email from your Google account if you use Google sign-in. Passwords are never sent to or stored by us in readable form; we keep only a keyed hash of a value derived in your browser.
- Study data: your answers, bookmarks, test results and reading progress.
- Security data: session records (IP address, browser, expiry) and an audit log of sensitive account events.
- Purchases: order and payment references from Stripe. We never see your card number.
How we use it
To sign you in, keep one active session per account, deliver the content you purchased, show your progress, prevent abuse and handle support requests.
Sharing
We use Cloudflare to host the service and store data, Stripe to process payments, and Google if you choose Google sign-in. We do not sell your data.
Cookies
We use a strictly necessary, HttpOnly session cookie to keep you signed in. No advertising cookies.
Your choices
You can change your password or sign out anytime. To request deletion of your account and data, contact support.