Privacy Policy

Last updated: 11 October 2026

HSK Teacher (hsk.jdkba.com, "the site", "we") is a free website for practising HSK 3.0 Chinese vocabulary. This policy explains what information we collect, why, and the choices you have. We keep it simple: we collect only what is needed to save your practice progress.

1. Using the site without an account

You can practise without signing in. In that case your progress, quiz history, Mistakes notebook and settings are stored only in your own browser (localStorage) and are not sent to us. Clearing your browser data removes them.

2. Information we collect when you create an account

• Email address — used as your login and to identify your account.
• Password (email sign-up only) — we never store your password itself, only a salted one-way hash (scrypt).
• Name — optional; only if you enter it or it is provided by Google.
• Learning data — which questions you answered and whether you were right, your Mistakes notebook, your position in each practice set, and your quiz scores.
• Session data — a random session token (stored as a hash), its creation and expiry time, and your browser's user-agent string, so you stay signed in and can be signed out of other devices.

3. Google sign-in

If you choose "Continue with Google", Google sends us a signed token. We use it only to confirm your identity and read your email address, whether it is verified, your name, and Google's account identifier for you. We do not receive your Google password, contacts, or any other Google data, and we do not post anything to your Google account. If an account with the same verified email already exists, it is linked to your Google sign-in. Google's handling of your data is governed by the Google Privacy Policy; loading the Google sign-in button lets Google set its own cookies.

4. How we use your information

• To sign you in and keep your account secure (including rate-limiting repeated failed logins).
• To save and sync your progress across your devices.
• To keep the service running and fix problems.

We do not sell or rent your information, show ads, use analytics or tracking scripts, or send marketing email. We do not use your data for profiling or automated decisions.

5. Cookies and local storage

We use one strictly necessary cookie, hsk_sid, which keeps you signed in (HttpOnly, Secure, expires after 30 days or when you sign out). We use your browser's localStorage to cache your progress and settings. There are no advertising or analytics cookies.

6. Server logs

Like most websites, our web server records technical logs (IP address, time, requested page, browser user-agent) for security and troubleshooting. These logs are rotated and deleted automatically, normally within about two weeks.

Problem reports. If you use "Report a problem", we store what you send (question ID, category, description, any screenshots and the optional reply email), the page you were on, your browser user-agent, your IP address and, if you are signed in, a link to your account. Screenshots are stripped of photo metadata (such as EXIF/GPS) and are never published. We use reports only to fix the question bank and to reply to you, and delete them once they are no longer needed. Please don't include personal information in screenshots.

Read-aloud audio. "Listen" buttons use your device's built-in speech voice, or pre-recorded audio files served from our own servers. Some browsers use an online voice service from the browser maker to speak the text; that is governed by the browser's own privacy policy.

7. Where data is stored and who can access it

Account data is stored in a database on our server hosted by Alibaba Cloud in mainland China, with daily backups on the same server that are kept for 14 days. Data is sent over encrypted HTTPS connections. Only the site operator has access. We share data only if required by law.

8. How long we keep it

We keep your account and learning data until you delete your account. When you delete it, it is removed from the live database immediately and disappears from backups within 14 days.

9. Your choices and rights

• Delete your account at any time: sign in, open the account menu (your initial in the top-right corner) and choose Delete account. This permanently deletes your account and all learning data.
• Access or correct your data, or ask a question about it, by contacting us (below).
• You can always keep using the site as a guest without an account.

10. Children

The site is intended for learners aged 14 and over. Younger learners should use it only with the permission and supervision of a parent or guardian, who may contact us to have a child's account deleted.

11. Changes

If we change this policy, we will update the date at the top of this page. Significant changes will be noted on the site.

12. Contact

Questions or requests about your data: sheilacraig2024@gmail.com.