Privacy Policy

Last updated: October 18, 2026

What we collect

When you sign in with Google or a magic link, we store your email address and a profile record so we can sync your study progress across devices.

Study data

We store which words you've marked as learned, when you learned them, and any notes you've written. This data is tied to your account so it can sync between devices. If you don't sign in, your study progress stays in your browser's local storage.

Usage analytics

To understand which parts of the app are useful — so we can improve them — we record basic usage events: which pages you open and in what order. These are first-party only: stored on our own servers, never shared with or sent to any third party, and never used for advertising.

Usage events are tied to a random, anonymous identifier kept in your browser (a first-party cookie and local storage). That identifier is not your name or email; if you're signed in, we also associate the events with your account so the data syncs with the rest of your study record. We do not track you across other websites.

Preventing sign-up abuse

When you request a sign-in link by email, we record technical details about the request (IP address, browser type and settings such as language, time zone and screen size, and whether the address was typed, pasted or filled in automatically, but never your individual keystrokes) to stop automated sign-ups that misuse other people's email addresses. If a request looks automated, we may ask you to complete a quick check, or hold it for a person to review before sending the link; in that case we also keep the email address you entered, so we can send the link once it's approved. We use these details only for that purpose and delete them after 30 days.

AI features

Some features use AI from Anthropic (Claude), sent through our own AI service:

• Sentence feedback. When you write a practice sentence and ask for feedback, the sentence and the word it's about are sent to Claude. We keep submitted sentences for 30 days; a sentence flagged for a safety review is kept for 180 days.
• Teacher assistant. Messages in the teacher chat are sent to Claude, and conversations are saved so you can return to them. Deleting a conversation removes it from your history right away, and we erase it permanently 30 days later.

What we don't collect

• No third-party analytics or tracking scripts
• No advertising data
• No cross-site tracking
• No data sold to third parties

Third-party services

We use these services to run Vocabber. They handle your data only to provide their service to us:

• Supabase: hosts our database and handles sign-in
• Netlify: hosts the website
• Cloudflare: runs the network in front of the site, so every visit passes through it (including your IP address), and provides Turnstile, the anti-bot check on sign-in forms
• Google: handles sign-in, only if you choose to sign in with Google
• Resend: delivers our emails (sign-in links, reminders, notifications), so it receives your email address and the message
• Anthropic: provides the AI behind the features above
• Fly.io: hosts our AI service, which passes AI requests to Anthropic

Each service has its own privacy policy governing how they handle your data.

Data deletion

You can reset all your study data from within the app at any time. To delete your account entirely, email [email protected].

Changes

If this policy changes, we'll update the date at the top of this page.