Privacy Policy

What we collect

• Email address (sign-in + password reset).
• Your dictation attempts, streaks, and FSRS schedule — stored so reviews can be scheduled.
• Aggregate leaderboard stats (username + daily XP).

What we don't do

• No invasive analytics. We use Cloudflare Web Analytics — cookieless and aggregate, derived from edge logs. No Google Analytics, no Mixpanel, no fingerprinting, no pixel tags.
• No advertising. Ever.
• We do not sell or share your data.

Cookies

Edictatio sets only the httpOnly access and refresh JWT cookies needed to keep you signed in. CSRF protection rides on the X-Requested-With request header — not a cookie. We do not set analytics cookies, and we do not embed third-party cookie-setting widgets.

Data retention

Your account, dictation attempts, and FSRS history persist until you ask us to delete them. Deletion requests are honored within 30 days; backups roll over within the same window.

YouTube-embedded exercises

Some exercises embed a YouTube video through the privacy-enhanced youtube-nocookie.com host. This host does not set tracking cookies on page load. Once you press play, YouTube may set cookies under its own domain; that interaction is governed by Google's privacy policy, not ours.

Loading the embedded player requires fetching one script from www.youtube.com/iframe_api. This is a YouTube requirement; we cannot route it through the nocookie host. We do not send your account identifier or any personal data to YouTube.

If an exercise does not use a YouTube video, no YouTube scripts are loaded at all.

Contact

Email support@edictatio.com for access, deletion, or correction requests. See also our Terms of Use.