Privacy

Draft notice. This is a plain-language description of what the software currently does. It is not a reviewed legal policy and must be replaced before public launch.

What is stored

• Account: email, display name, a salted password hash (bcrypt). The password itself is never stored.
• Learning data: progress, exercise attempts, hints used, notes, bookmarks, XP and streaks.
• Sessions: a hashed session token and the browser user-agent string, kept for up to 30 days.

What is not done

• No advertising and no sale of data. No third-party analytics scripts are loaded.
• Cookies: one httpOnly session cookie, plus a theme preference stored in your browser.

Your control

You can delete your account and all associated learning data from Settings. Data export is planned and not yet available.