Privacy Policy

This policy explains what information the site processes, why it is used, and the choices available to visitors.

Effective August 23, 2026 · Last updated: September 4, 2026

Information processed

• Test activity: selected track, answers, estimated results, missed words, and test history.
• Browser storage: the site may store test history and saved words locally under vt_history and vt_words. It also stores your analytics choice and short-lived session attribution, such as the first page visited and campaign labels, so one visit can be measured consistently.
• Account data: if you create or use an account, the site processes the email address, display name, join date, saved words, and test history you provide.
• Email delivery: when you request a vocabulary report by email, the destination address and report content are sent to the email delivery provider for that request.
• Analytics: Google Analytics may receive device, browser, approximate location, page-view, test-funnel, sharing, export, and account-feature interaction data. For signed-in users, the site may send an internal pseudonymous account identifier as Google Analytics User-ID; it does not send the account email address or display name as analytics event parameters.
• First-party visitor count: the site counts page views and approximate unique visitors without cookies or browser storage. The server temporarily uses the request IP address and user agent to create a keyed one-way hash, then stores only that pseudonymous hash with the UTC day, first and last page path, language, external referrer host, and view count. Raw IP addresses and user-agent strings are not stored in the counter. Daily counter records expire after approximately 400 days.
• First-party product totals: the site counts completed tests and clicks on the extended-report offer for aggregate product measurement. Each action stores only a random single-event ID, the event type, and the UTC day. The event ID is used only to prevent duplicate counting and is not shared across actions or linked to an account, IP address, email address, browser identifier, or test result. These minimal records are retained to maintain all-time totals.
• Technical logs: hosting and API providers may process IP addresses, request times, user agents, and error information for security and service operation.

Purposes and legal basis

Data is used to provide the test, remember progress, synchronize signed-in accounts, send requested reports, measure site usage, prevent abuse, and maintain reliability. Depending on location, processing may rely on performing a requested service, legitimate interests in operating and securing the site, consent for non-essential analytics, or compliance with legal obligations.

Analytics choices

For visitors in the European Economic Area, the United Kingdom, and Switzerland, the cookie notice is shown and all optional categories are presented as enabled by default. Google Analytics remains blocked until the visitor confirms those preferences or closes the notice. Before confirming, the visitor can turn off Performance, Functional, or Targeting Cookies independently. If the visitor does not interact with the notice, Google Analytics remains blocked.

For visitors outside those regions, the cookie notice is not shown and Google Analytics is enabled automatically. A previously saved visitor choice continues to take priority. If the site cannot determine the visitor's region, it shows the notice and keeps Google Analytics blocked until the default preferences are accepted. Cookie Settings can be reopened from the footer at any time; Essential Cookies remain active.

Advertising storage, advertising user data, ad personalization, and Google Signals remain disabled in all regions. When Google Analytics is blocked, the site still receives anonymous, cookie-free aggregate traffic information from Netlify's server-side Web Analytics. Browser controls can clear the stored analytics choice.

The first-party visitor count is separate from Google Analytics and does not read or write a consent cookie or browser identifier. It is used for aggregate audience trends and basic abuse filtering; its pseudonymous records are not used for advertising or individual user profiles.

Storage and retention

Local-storage data remains on the device until it is cleared by the visitor or removed through browser controls. First-party visitor-counter records expire automatically after approximately 400 days. Minimal first-party product-event records are retained to maintain all-time completed-test and offer-click totals. Account data may be stored in the site database while the account remains active, and email delivery providers may retain operational delivery records under their own policies. A fixed deletion schedule has not yet been implemented for account data; deletion requests are handled through the contact address below.

Service providers

The current implementation may use Netlify for hosting and serverless functions, MongoDB for synchronized account data, Google Analytics for usage measurement, and Resend for requested email delivery. These providers process information under their own terms and privacy documentation.

Your choices and rights

You can use the test without creating an account, clear browser storage, block analytics through browser or consent controls, and avoid the email-delivery feature. Depending on applicable law, you may request access, correction, deletion, restriction, objection, or data portability.

Children

The service is a general educational tool and is not designed to collect personal information from children without appropriate adult authorization. A parent or guardian who believes a child submitted personal data may request its deletion.

Contact

No verified public privacy-request mailbox is currently configured. Visitors can clear local-storage data through browser controls. Until a verified operator contact is published, the service cannot promise an operator-managed channel for account access, correction, or deletion requests; visitors should avoid account and email-report features if this limitation is unacceptable.