Privacy policy
Last updated: 2026-10-26
Reading and guest learning
Public articles, videos and practice do not require registration. When you save a topic or start a practice session, the application creates a random guest identifier and a first-party session cookie. Your saved topics, answers, timing and results are linked to that identifier. Guest access lasts up to 30 days in the same browser. Clearing cookies loses access to the saved activity. Expired guest records are removed gradually as new guest sessions are created.
Administrator accounts and security
Administrator and editor accounts store a name, email address and password hash. These accounts are used to manage content, settings and access. Administrative changes are recorded in an activity log. Rate-limit records help reduce abuse. Hosting infrastructure may also keep technical request logs, such as IP addresses and browser information.
Where information is stored
The live application can store records, logos and PDF uploads in its configured MySQL database. VPS installations may instead use a private SQLite database. Website operators control hosting and backups. Backup copies may remain until the corresponding backup is replaced or deleted.
YouTube and external app links
Published video thumbnails load from YouTube image servers, sending normal connection information to that provider. Selecting a video opens YouTube, where Google's privacy policy and YouTube settings apply. The application does not automatically embed video players. An app download link may open an external store or website with its own privacy terms.
Advertising and analytics
Advertising and third-party analytics are not enabled by default in this application. If the operator adds either service, the policy and applicable consent controls must be updated before activation. Provider-specific advertising cookie and data practices depend on the actual deployment.
Requests and contact
Use the contact information on this website for privacy questions or account-data requests. Do not send passwords, cookies or sensitive documents. For guest activity, the operator may need information that safely identifies the relevant record; anonymous activity cannot be linked reliably after the browser cookie is lost. The policy should be kept aligned with actual hosting, retention and services.