Privacy Policy

Who this notice covers

This notice describes how the Vane language-learning website handles information when you read lessons, play games, sign in, use Ask Vane or contact us. It covers both children and adults. The legal operator and applicable jurisdiction still need owner confirmation before this draft is published as a final policy.

Information used by the app

Account: Google sign-in provides a verified account identifier, email address and name. Vane stores these with account creation and last-sign-in dates. You can change your display name. Vane does not receive your Google password.

Learning: settings, player names, personal words, game results, lesson drafts and progress can be stored on your device and, when signed in, synchronized to your account. Do not put sensitive personal information in player names or practice text.

Contact: the Contact Us form sends your name, email address, message type, message and any attached image to the Vane inbox through an email provider. Avoid sending passwords or sensitive information. Contacting us is not a subscription to marketing.

Technical requests: the hosting and service providers receive connection information, such as an IP address, when your browser requests the website, account services or email delivery. Optional analytics is separate from these operational requests.

Cookies, browser storage and analytics

Vane uses browser storage for sign-in, language and appearance preferences, guest limits, learning progress and your privacy choice. Signing out removes the local sign-in credential; it does not delete your server account or all locally saved learning data. Clearing site data can remove unsynchronized work.

Optional analytics is disabled in this release while the privacy arrangements for children and adults are reviewed. If enabled in a future reviewed release, Vane requires an explicit analytics choice first. No choice, an expired choice, blocked storage, Do Not Track or Global Privacy Control keeps analytics off.

The optional services are Vercel Web Analytics for page visits and PostHog for allowed screen, sign-in and active-use events. PostHog can link a permitted visit to an internal account ID, not a name or email. Vane disables automatic click capture and session replay and filters typed text, personal words and URL query strings out of its analytics events.

Your privacy choice is saved on this browser for up to 180 days. Privacy choices lets you change it. Withdrawal stops new collection; it cannot recall data already received by a provider. Other browsers and devices have separate choices.

Ask Vane, speech and optional AI features

Ask Vane searches the authored lessons on your device. It does not send your questions to an external AI model. Unanswered questions are kept in a bounded local log, which you can export or clear in About Vane. These helper logs are not synchronized to your account.

Downloaded helper files may be stored in the browser cache for offline use. This does not make Google sign-in or account synchronization work offline.

Other optional AI word, hint or card-writing features are different from Ask Vane. When used and configured, they send the requested words, context or prompts through the Vane server to Anthropic. Do not include personal or sensitive information. Generated material may be inaccurate.

Pronunciation uses browser or device speech voices. An online voice may send the text to its voice provider. Vane does not record your microphone for the current listening and speaking activities.

Why information is used and who handles it

Information supports the requested account, saved learning, pronunciation, support and operation of the service. Optional analytics is for understanding use and improving the app, only when available and permitted.

Providers include Google for sign-in and font delivery, the MongoDB database service for account and progress storage, Vercel for hosting, the configured email provider for messages, and the optional services described above. Their processing and storage may take place outside your country. Hosting regions, provider agreements and any required transfer safeguards must be confirmed by the operator before final publication.

Social icons are ordinary external links, not embedded social feeds. Following one takes you to that provider, whose privacy practices apply. The current app does not include an advertising network or a data-sale feature.

Children and families

Vane is intended for children and adults. A parent or guardian should supervise a child’s use and avoid entering a child’s personal information in practice text, AI requests or feedback.

A verified parental-consent process has not yet been implemented. Child account creation and collection of children’s personal information require an appropriate, reviewed process before launch. A Google login or a policy link does not by itself establish parental consent.

Parents or guardians can contact us to ask about a child’s information or request access, correction or deletion. We may need to verify the requester’s authority without asking for more information than necessary.

Access, correction, deletion and retention

Contact us to request a copy, correction or deletion of account or support information, or to raise a privacy concern. Depending on where you live, you may also have rights to restrict, object to or transfer certain processing and to complain to your local privacy authority. We may need to verify your identity before acting.

Account deletion is currently a support request, not a self-service button. Signing out, clearing local data or removing Google access does not automatically erase the database record, support email or data already held by an analytics provider.

The current code has no automatic expiry schedule for account or progress records. Provider log, backup, support-email and analytics retention periods and the deletion procedure need operator confirmation before this policy is finalized. Do not treat local log clearing as deletion from all providers.

Security and changes

Vane uses authenticated account requests and validation to protect access to saved account data. No online service can guarantee absolute security. Report suspected unauthorized access through Contact Us. Material changes to this notice will be identified by an updated date; new optional uses of data require the appropriate notice and choice.

Contact and privacy requests

Use the Contact Us form. For access, correction or deletion requests, identify the account concerned; never send passwords.