Privacy
Last updated: 8 September 2026
The short version
We store what is needed to run the practice app and the subscription. We show no advertising and we sell no data. We do use Google Tag Manager, which loads third-party analytics — the one place your data leaves our servers, described below.
What we store
- Account: email address, optional display name, and a bcrypt hash of your password. We never store the password itself.
- Practice logs: each session (mode, difficulty, start time, duration, score) and each answer (the question, the expected answer, what was typed, whether it was right, and how long it took).
- Free-tier metering: a first-party cookie holding a random device id, and a salted one-way hash of your IP address. We do not store raw IP addresses, and the hash cannot be reversed back into an address.
- Product events: anonymous counters such as “practice started” or “paywall shown”, used to understand where the product is confusing.
Payments
Card details are handled entirely by Stripe and never reach our servers. We store your Stripe customer and subscription identifiers, the plan, its status and the renewal date.
Cookies
Three of ours, all first-party and strictly functional: a login session cookie, the device id used for free-tier metering, and your chosen language.
In addition, Google Analytics sets its own cookies to measure how the site is used. These are not strictly necessary, so they stay switched off until you accept them in the banner shown on your first visit. You can change your mind at any time with the “Cookie settings” link in the footer.
In addition, Google Analytics sets its own cookies to measure how the site is used. These are not strictly necessary, so they stay switched off until you accept them in the banner shown on your first visit. You can change your mind at any time with the “Cookie settings” link in the footer.
Analytics
We use Google Tag Manager to load measurement tags, which tell us things like which pages people visit and where they stop. This sends data — including your IP address and a randomly generated identifier — to Google, which may process it outside the EU. We do not send Google your email address, your child’s answers, or any practice data.
Analytics runs only if you accept it. Until then, Google Consent Mode holds every measurement and advertising signal at “denied”, and no analytics cookie is written. Rejecting costs one click, the same as accepting, and the app behaves identically either way — as it does with any tracker blocker.
Analytics runs only if you accept it. Until then, Google Consent Mode holds every measurement and advertising signal at “denied”, and no analytics cookie is written. Rejecting costs one click, the same as accepting, and the app behaves identically either way — as it does with any tracker blocker.
Children
The app is designed for children to use, but accounts are for adults. Practice logs are tied to the parent’s account. We do not ask children for personal information and there is no chat, no user profile and no way for children to contact each other.
Deleting your data
Email us and we will delete your account and every practice log tied to it. Deletion is permanent and takes effect within 30 days.
Contact
Questions about any of this go to the address on the pricing page.