Data Privacy
What we store, and why
Plain-language summary. No legal theatre — just an honest account of the data this app keeps.
What we collect
- Your email and display name — provided when you create an account, so you can sign in and be recognised.
- A password hash — we store a PBKDF2 hash, never the password itself. Passwords are never logged.
- Your learning data — lessons completed, quiz scores, badges earned, and day streak.
- Anything you post — comments you write, and any reports you file about a comment.
- A session token — kept in your browser's localStorage so you stay logged in between visits.
- Your theme choice — light, dark or system, also in localStorage.
Where it lives
Lesson, account and comment data is stored in a Cloudflare D1 database running on Cloudflare's global network. Sessions are stored as hashes and can be revoked at any time by logging out.
What we do not do
- No third-party analytics or advertising trackers.
- No selling or sharing of your data with advertisers.
- No reading of content you have not posted to the app.
Your controls
- Log out to revoke your current session immediately.
- Clear your browser storage to remove the session token and theme preference.
- To have your account and its data deleted, raise a request on the Support page.