Privacy policy
We collect what the product needs and nothing else: your email, your practice answers and timings, and the settings you choose. We do not sell data and we do not run advertising.
What we store
- Account: email, name if you give one, password hash or sign-in provider.
- Practice: every answer you type, whether it was right, how long it took, and the resulting schedule. This is the product.
- Billing: handled by Stripe; we store your customer and subscription ids, never card numbers.
Login links and receipts always. A daily reminder and a weekly summary only if you turn them on. If you ask for your words from the IELTS Trap Test, you get that one email and nothing more.
Children
Sign-up asks how old you are. If you are under 13, a parent makes the account with their own email address and can hand it to you to use; that is the parent's permission the law asks for, and we store nothing about the child beyond the practice answers the account records. A parent can see, export or delete everything from Settings at any time. In a family plan, a parent adds a child by first name and a four-digit PIN only: no email address, no birthday, nothing else about the child, and the parent can see, export or delete that child's account from the Family page. In a classroom plan the teacher does the same for students, having confirmed that the school or the parents allow it; a student's data is their practice record only, we never show ads or sell data, and the teacher can delete any student or the whole class at any time.
Cookies
We set a few small cookies that make the site work, and none for advertising or tracking across other sites: your sign-in session; ss_ab, which remembers which version of a page you saw so it stays the same for you; ss_wl, set by the private link in our interest-list email so your free months are applied when you sign up; and d1b, a short-lived technical marker that makes sure the page you load next reflects what you just did. None of them identifies you to anyone else, and you can clear them in your browser at any time.
Who handles data for us
Stripe (payments), Resend (email), Cloudflare (hosting and the database), and Google if you sign in with Google. Our analytics are our own: we record what you did on the site (a page viewed, a word typed) under an anonymous id, never with an advertising or tracking company and never with session recording. Cloudflare, our host, also counts page visits for us with its Web Analytics, which sets no cookies and does not follow you to other sites.
Your rights
Export everything as CSV or delete your account from Settings. Questions: hello@spelling.school.