Privacy Policy

Who we are

This privacy policy applies to Learn Modern Thai Script (the “Service”), a web application that helps learners practise reading modern Thai script. The Service is available at learnmodernthaiscript.com.

For privacy questions or to exercise your rights, contact us at hello@learnmodernthaiscript.com.

What the Service does

When you use the Service, we may process information so that you can:

• Create an account and sign in with email and password
• Practise letters, similar letters, words, and sentences in quiz sessions
• Track spaced-repetition progress, review due cards, and view practice statistics
• See which days you completed practice on a calendar
• Browse public pages such as the home page and quick reference chart without an account

Information we collect

Account information

If you register, we collect your email address and password. Passwords are handled by our authentication provider; we do not store your password in plain text. We may also store a display name derived from your sign-up details or email address.

Learning and usage data

When you are signed in and use practice or review, we store data linked to your account, including:

• Progress records — correct and incorrect counts, streaks, review schedules, and mastery status per card
• Quiz attempts — which card you answered, whether the attempt was correct, the answer you selected, a session identifier, and a timestamp
• Study sessions — when you finish a practice or review session, how many cards it included, the calendar date practised, and (for session variety) which prompts or similar-letter drill sets appeared in that session

Technical and session data

We use cookies and similar technologies to keep you signed in and to operate the site securely. Our hosting and database providers may also process technical data such as IP address, browser type, and request logs when you access the Service.

Bot protection (hCaptcha)

On sign-in and sign-up, we use hCaptcha to reduce abuse. hCaptcha may collect device and interaction data to distinguish humans from bots. See hCaptcha's privacy policy.

Information you send us by email

If you email us (for example to request account deletion), we receive your email address, message content, and any information you choose to include.

How we use your information

We use the information above to:

• Provide, maintain, and secure the Service
• Authenticate you and manage your account
• Save your learning progress and power spaced repetition and review
• Show practice statistics and calendar activity
• Improve session variety (for example, avoiding repeated prompts in close succession)
• Respond to support and privacy requests
• Protect the Service against fraud and abuse

We rely on contract (to provide the Service you signed up for) and legitimate interests (security, abuse prevention, and improving the learning experience) as legal bases where applicable under UK and EU data protection law.

Who we share information with

We use trusted service providers to run the Service. They process data on our instructions and only as needed to provide their services:

• Supabase — authentication, database, and storage of account and learning data (Supabase privacy policy)
• Vercel — website hosting and delivery (Vercel privacy policy)
• hCaptcha — bot protection on authentication (see above)

We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and security of users and the Service.

Analytics and search tools (current and planned)

Currently

We do not use Google Analytics or similar visitor analytics cookies on the Service at this time. Basic technical logs may still be created by our hosting provider when pages are requested.

Google Analytics (planned)

We plan to add Google Analytics to understand how visitors use the public parts of the site (for example, which pages are visited and how users navigate). When enabled, Google may set cookies such as _ga and collect information such as pages viewed, approximate location (derived from IP), device and browser type, and referral source. Google processes this data as described in the Google Privacy Policy. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on or your browser's cookie settings. Where required by law, we will ask for your consent before enabling non-essential analytics cookies and will update this policy when Analytics goes live.

Google Search Console (planned)

We plan to use Google Search Console to monitor how the site appears in Google Search (for example, search queries, impressions, and indexing status). Search Console is a site-owner tool: it does not place analytics cookies on visitors' browsers. Google may process aggregated search performance data relating to our site as described in Google's privacy documentation.

Cookies

The Service uses cookies and similar storage for:

• Essential cookies — to keep you signed in and protect your session (via Supabase authentication)
• Security cookies — hCaptcha may set cookies when you use sign-in or sign-up
• Analytics cookies (planned) — if we enable Google Analytics, as described above

You can control cookies through your browser settings. Blocking essential cookies may prevent you from staying signed in.

How long we keep information

We keep your account and learning data while your account is active. If you delete your account or ask us to delete your data, we delete or anonymise personal information associated with your account, subject to any limited retention required by law or for legitimate security purposes (for example, short-lived server logs).

International transfers

Our service providers may process data in countries outside your own, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by those providers.

Your rights

Depending on where you live (including the UK and EEA), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

To request access, correction, or deletion of your account and data, email hello@learnmodernthaiscript.com from the email address linked to your account. We will verify your request and respond within a reasonable time.

Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at hello@learnmodernthaiscript.com and we will take steps to delete it.

Changes to this policy

We may update this privacy policy from time to time (for example, when we enable Google Analytics or Search Console). We will post the revised policy on this page and update the “Last updated” date. Continued use of the Service after changes take effect constitutes acceptance of the updated policy where permitted by law.