Privacy Policy

1. Introduction

This Privacy Policy explains what information ToSpell (the “Service”) collects, how we use it, and the choices you have. By using the Service you agree to the practices described here.

2. Information we collect

• Account data — your name, email address, and a securely hashed password.
• Practice data — the exercises you attempt, your answers, and session progress, so we can save and display your work.
• Technical data — basic information needed to operate the Service, such as authentication cookies.

3. How we use your information

We use your information to provide and maintain the Service, authenticate your account, save your practice progress, send account-related emails (such as verification and welcome messages), and improve the Service.

4. Cookies

We use a small number of cookies that are essential to the Service — primarily a secure, HttpOnly session cookie that keeps you signed in. We do not use cookies for third-party advertising.

5. Service providers

We rely on trusted providers to operate the Service, including a managed PostgreSQL database for storing your data and an email delivery provider for sending account emails. These providers process data on our behalf under their own security commitments.

6. Data retention

We keep your account and practice data for as long as your account is active. You may request deletion of your account and associated data at any time (see “Your rights” below).

7. Your rights

You may request access to, correction of, or deletion of your personal data. To make a request, contact us at support@tospell.org.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, please contact us so we can remove it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

10. Contact

Questions about your privacy? Contact us at support@tospell.org.