Privacy

What we hold

Your email address and password. The password is stored hashed — we can’t read it.

Your known-symbol list. Which symbols you’ve marked known, and when. This is the product working, and it means nothing outside it.

What you’ve read. Which stories you’ve opened, so the library knows where you are.

Payments. Handled by Stripe. We never see or store card details — we keep a customer reference and whether your subscription is active.

Code you import

Your code never leaves our servers. When we need to gloss a library symbol we haven’t covered yet, we send its name — never your code. Symbols like useState or filter mean the same thing in every file on earth, which is what makes them vocabulary rather than names. Everything else is glossed locally from the dictionary.

Private imports are stored in your account so you can come back to them. Nobody else sees them. They’re deleted after 12 months without a login.

Public imports. If you choose to make an import public, it joins the library for other readers. That choice is permanent and we tell you so before you make it. The library entry keeps no link to you — no name, no account, no attribution — so it stays in the library even if you delete your account, because at that point it isn’t your data, it’s library content.

Only make something public if you have the right to share it. If someone tells us in good faith that a public import shouldn’t be there, we take it down.

Cookies, logs, and what we don’t do

We use one cookie: the one that keeps you logged in. It’s required for the site to work.

Our servers keep standard logs — IP address, browser, page requested, time. Deleted after 30 days.

We run no analytics and no advertising trackers. No Google Analytics, no pixels, no ad beacons, nothing that follows you anywhere else. You can verify this in your browser’s developer tools. Because we don’t track you, a Do Not Track signal has nothing to change — we honour it regardless.

Keeping your account

Your account and your known-symbol count stay whether or not you’re paying. A vocabulary you spent months building shouldn’t expire because you stopped subscribing.

If you don’t log in for three years, we email you first, then delete the account.

Deleting, and getting a copy

Email [ADDRESS] and we delete your account, your known-symbol list, your reading history and your private imports — within 30 days, backups included. Public imports stay in the library, already stripped of any link to you.

Ask the same way for a copy of everything we hold, and we’ll send it in a machine-readable file within 30 days.

You can also do both yourself from your Account page, under Your data.

Who else touches it

Stripe — payments. [HOSTING] — servers and database. [MODEL PROVIDER] — glossing library symbols by name. [EMAIL PROVIDER] — account emails.

That’s the whole list. It doesn’t grow without this page changing.

Security

Passwords are hashed, traffic is encrypted, and database access is restricted. No system is perfectly secure and we won’t pretend otherwise. If there’s a breach affecting your data, we’ll tell you.

Email

Account emails — receipts, password resets, policy changes — are part of the service and have no unsubscribe. Anything else is optional and carries an unsubscribe link in every message.

Age

CL is for people 13 and over. We don’t knowingly collect anything from children under 13. If you believe a child under 13 has an account, email us and we’ll delete it.

If we’re required to hand something over

If we receive a valid court order or legal demand, we comply. Where we’re allowed to tell you, we do.

If CL is sold

If CL is acquired or merged, your data transfers with it. We’d email you before that happened so you could delete your account first.

Where you are

We’re in Ontario, Canada. Your data is stored in [REGION].

If you’re in the EU or UK, you have rights to access, correct, delete, restrict and export your data — email us and we’ll do it. The same applies in Quebec under Law 25. If you’re unhappy with how we’ve handled something, you can complain to your local data protection authority; ours is the Office of the Privacy Commissioner of Canada.

If you’re in California, the CCPA gives you rights to know what we collect, to have it deleted, and not to be treated differently for asking. We don’t sell personal information and never have. Email us to exercise any of them.

Changes

If this page changes materially, we email you before it takes effect.

Contact

[ADDRESS]