Privacy Policy.

Introduction

Welcome to Xuehao. We are committed to protecting your privacy and being transparent about how the site works. This policy explains how we handle information when you use the website, and it applies to visitors in the EU, the UK and everywhere else.

Personal information

The flashcards, word lists, stroke order pages and printables do not collect, store or process any personal information. They need no account, and your settings stay in your browser’s local storage. They are never sent to us.

Personal information is only involved in a few places on the site:

• The contact form: your name, email address and message, if you send us one
• Analytics: usage data about how the site is used, sent to Google Analytics

We do not sell personal information, and we don’t build advertising profiles.

Contact form

If you use the contact form, we collect the name, email address and message you enter. It is emailed to us via Resend (Resend, Inc., USA), our transactional email provider, so it passes through their systems on the way to our inbox. We use it only to read and reply to your message, and keep it only as long as needed to handle your request. Legal basis: your consent, given by submitting the form, and our legitimate interest in responding to enquiries.

The form is protected by Cloudflare Turnstile, a CAPTCHA alternative that checks you are not a bot before a message is accepted. Turnstile may process your IP address and device signals for that check; see Cloudflare’s privacy policy. Legal basis: our legitimate interest in preventing spam and abuse.

Analytics and cookies

We use Google Analytics to understand how visitors use the site: pages visited, browser and device type, approximate location and referring website, using cookies and similar technology. A notice tells you about this on your first visit, and using the site after it appears means you’re okay with it. See Google’s privacy policy. To opt out of Google Analytics regardless, install the Google Analytics Opt-out Browser Add-on.

Preferences

Separately, your study settings (standard, level, set, study mode, prompt direction, pinyin and font) are stored in your browser’s local storage. They never leave your browser and aren’t used to identify or track you.

Third-party services

• Google Analytics: website analytics
• Resend: delivers contact-form messages to us, if you use the form
• Cloudflare Turnstile: spam protection on the contact form

These services have their own privacy policies, and we encourage you to review them.

International data transfers

Google, Resend and Cloudflare are based in, or operate servers in, the United States and elsewhere outside the EU/UK. Where personal data is transferred there, these providers rely on mechanisms such as Standard Contractual Clauses to safeguard it in line with GDPR/UK GDPR requirements.

Data security

Your study settings are stored locally in your browser and never transmitted to us. Contact-form messages pass through Resend to reach our inbox. We don’t run a database of our own, which limits what could ever be exposed, but no method of transmission or storage is completely secure.

Children’s privacy

Xuehao is suitable for learners of all ages. We do not knowingly collect personal information from children under 13 (or the relevant minimum age where you live), other than a parent or guardian using the newsletter or contact form on their behalf.

Changes to this policy

We may update this policy from time to time, for example when we add a service that handles personal data. Any changes will be posted on this page with an updated “Last updated” date.

Your rights

If you’re in the EU, the UK or a jurisdiction with similar protections, you have the right to access, correct, delete or export the personal data we hold about you, and to object to or restrict its processing. In practice, that means:

• Opting out of Google Analytics with the browser add-on, or by blocking cookies in your browser settings
• Clearing your browser’s local storage to remove your study settings
• Contacting us to request access to, or deletion of, a message you sent us

If you’re unhappy with our response, you also have the right to complain to your local data protection authority (in the EU, find yours in the EDPB member list; in the UK, the ICO).

Contact us

If you have any questions about this policy or want to exercise any of the rights above, please contact us.