Privacy

What stays on your device

Four things, in your browser's local storage. None of them are sent to any server, and none of them are readable by anyone but you.

• Your progress — which characters you have met and how you have done on each, per skill.
• Your settings — speed, pitch, key bindings, theme, motion.
• Your statistics — sessions, streak, XP, best speed.
• Your daily challenge results — the last few weeks of them.

Clearing your browser data erases all of it, and there is no copy anywhere else to restore from. If it matters to you, export it fromsettings — it is a plain JSON file you keep.

What is counted

Two things, both of them counts rather than records of a person.

Anonymous usage counters

When you start a practice session or finish a game, the browser sends a request naming that event — practice_start, and sometimes a short label like listening. That is the whole message. There is no identifier, no session token, nothing you typed, and no way to connect two events to the same person.

The server answers with an empty response and stores nothing; the request line in its own access log is the only record, and a scheduled script turns those lines into daily totals. You can turn this off insettings, and it is never sent at all if your browser asks not to be tracked.

Cloudflare Web Analytics

Counts page views. It iscookieless by design and does not fingerprint or follow anyone between sites. Cloudflare processes this on our behalf and it is the only third party this site contacts.

Your IP address

Like every web server, ours records the address each request came from. That is unavoidable — it is how a reply finds its way back — and the log is what makes it possible to see that a site is being attacked.

The script that produces the visitor counts does not keep addresses. It hashes each one with a secret that is regenerated every day and never stored, counts the hash, and discards it. Two visits on the same day collapse into one count; the same person tomorrow does not, so nobody can be followed across days — not even by us. The raw logs rotate daily and only the most recent few days exist on the server.

What there is none of

• No cookies. Not one, not even a "necessary" one.
• No accounts, no email addresses, no names.
• No advertising, no advertising networks, no data sold or shared.
• No fonts and no images from anyone else's server — they are all served from this domain. One script is not: Cloudflare's analytics beacon, described above. It is the only file this site loads from anywhere else.
• No profiling and no automated decisions about you.

You can check all of this rather than take our word for it: open your browser's developer tools on any page here and look at the cookie jar and the network tab. Thewhole source is public, including the script that processes the logs.

Your rights

Under the GDPR you can ask what data is held about you, ask for it to be corrected or deleted, and object to how it is processed. In practice there is very little to ask about: we hold no account, no contact details and nothing that identifies you. Your progress is already in your hands — deleting it is a button insettings and needs nobody's permission.

For anything else, or to ask a question about this page, contactCan Türk.