Trust
Privacy Policy
Privacy policy for the public website, the offline-first app, the VocabDict desktop dictionary, feedback, optional accounts, and learning sync.
Effective: 2026-08-19 · Last updated: 2026-10-07 (added VocabDict desktop dictionary section)
Website and analytics
The website uses privacy-focused analytics to understand page views, player openings, book browsing, download clicks, and feedback result counts. Analytics events do not store raw IP addresses, cookies, email addresses, passwords, or session tokens.
App and feedback data
The app is designed around local vocabulary packs, local progress, and offline study. Anonymous feedback may include the word book, entry ID, issue type, app version, platform, an install identifier, the note you write, and basic request information used for abuse protection.
Accounts and learning sync
Optional accounts use an email address to create a session and sync learning progress. Synced data may include devices, word book, review status, quiz outcomes, and timestamps needed to merge progress across devices. Account users can export and delete cloud learning data.
VocabDict desktop dictionary
The VocabDict desktop dictionary is offline-first: the built-in lexicon, loaded MDict dictionaries, screenshot OCR, and the built-in AI features all run on your computer. OCR-recognized text, dictionary content, and text you translate or chat about with the built-in local models do not leave your device.
Account sign-in on desktop supports Google sign-in in addition to email sign-in; the same optional account used on the website signs in there, and the account section above applies. The desktop installation reports a stable machine identifier used only for license activation, device-seat management, and subscription verification; it is not used to track you across other applications.
Three network features may send data to services outside our infrastructure: (1) If a loaded MDict dictionary script requests example-sentence audio online, the sentence text is sent to Microsoft's speech service (speech.platform.bing.com) to synthesize the audio; local on-device synthesis is the offline fallback. (2) If you configure your own API key for an online model provider (for example OpenAI or Anthropic), the text you translate or chat about is sent to that provider and handled under that provider's own privacy policy; the built-in local models do not require a key and send no text. (3) AI models, speech models, and translation language packs download on demand from Hugging Face (huggingface.co); these are data assets and contain no personal information.
Two local networking features are off unless you enable them. The LAN phone-pairing link listens on your local network (port 27302) so a paired VocabDict mobile app on the same network can look up your dictionaries, receive customizations, and use the desktop's translation features; access requires a pairing token and a matching account. The MCP server runs on localhost only (127.0.0.1:27301), is token-protected, and exposes word lookup and word-book tools to AI agents running on the same computer.
Payments and orders
Paid digital content checkout is processed by Stripe as our payment provider. Vocab Player stores order records, product keys, entitlement status, checkout and payment provider IDs, refund status, and timestamps needed to unlock purchases, handle support, prevent abuse, and reconcile webhooks. Stripe may process payment details, billing details, taxes, receipts, and fraud-prevention signals under its own privacy and security practices.
We do not store full card numbers. Account deletion removes learning and session data, but order, refund, audit, and payment records may be retained when needed for security, tax, accounting, dispute, or legal obligations.
Community word lists
Community word lists are private by default. When you publish a list, it becomes visible in Explore for anyone to find and quiz. Public pages do not show user email addresses.
Study Pacts
Study Pacts let you commit to a shared learning goal with other members. When you join or create a pact, your display name, study progress, and outcome results are shared with the other members of that pact so the group can track collective progress. The pact creator can cancel and delete a pact at any time, and any member can leave a pact at any time. Pact data is retained according to the retention policy below.
Onboarding Snapshot
The onboarding snapshot is a short 10-question assessment that estimates your starting skill level. Your answer data is collected to produce a skill estimate and recommend a starting point. If you sign up for an account, your snapshot results are linked to your account so you can track progress from your baseline. If you complete the snapshot as a guest without signing in, the results are retained for 30 days and then automatically deleted.
Share Artifacts
Share cards are images generated from your quiz and study results so you can share progress with others. These share artifacts may be publicly accessible via their share URL. Share artifacts do not include personally identifiable information such as your email address or full name. You can delete your share artifacts at any time, which removes the image and invalidates the share URL.
Growth Events
We collect anonymous analytics events — such as share clicks, invite sends, and outcome completions — to understand how community and retention features are used and to improve the product. Growth events do not store answer content, personal messages, email addresses, or any other personally identifiable information. Raw growth events are retained for 90 days and then aggregated, after which the raw events are deleted.
Data retention
The following table summarizes how long each category of data is kept. Retention periods are enforced automatically where noted; you can also request earlier deletion as described below.
| Data category | Retention period |
|---|---|
| Account data | Retained while the account is active; deleted on request. |
| Pact data | Retained while the pact is active; anonymized 7 days after a member leaves. |
| Guest outcomes | 30 days, then automatically deleted. |
| Share artifacts | Retained until you delete them. |
| Growth events | 90 days, then aggregated and raw events deleted. |
| Resume tokens | 10 minutes, then automatically consumed or expired. |
Data deletion
You can request full data deletion from the account page. Deleting your account removes sessions, devices, learning events, learning snapshots, and saved community favorites, and the deletion cascades to all related data including pacts, outcomes, share artifacts, and growth events. Community lists owned by the deleted account are hidden from public browsing so reviewed content can be handled safely. Order, refund, audit, and payment records may be retained when needed for security, tax, accounting, dispute, or legal obligations.