Privacy Policy

1. Who we are

ChineseReads (chinesereads.com) is a web application for learning Mandarin Chinese through graded texts and vocabulary tools. This service is operated as a personal project.

2. What data we collect

We collect the following personal data when you register and while you use the service:

• Email address
• Name
• Preferred language
• Password (stored encrypted using BCrypt — we never store plain passwords)
• Your learning activity (texts read, reading streaks, saved words and flashcard reviews), used to show your progress and to power optional reminders.
• If you subscribe to PREMIUM: billing identifiers that link your account to your subscription (a Stripe customer ID and subscription ID). Your card details are entered directly on Stripe and are never stored by ChineseReads.
• If you arrived through a promotional link or used a discount code: the campaign code involved (e.g. the name of the collaborator who recommended us), used only to measure how well each collaboration works.

We also measure aggregate traffic with Umami, a cookie-less analytics tool. It collects anonymous, aggregated statistics only (pages visited and where visitors come from), stores no personal data and cannot identify you, so it requires no consent.

3. How we use your data

• To provide and maintain the ChineseReads service.
• To manage your account and personalize your experience.
• To analyze anonymous, aggregate usage patterns and improve the application.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies

We only use essential cookies:

• Essential cookies — necessary for authentication (JWT token stored in HttpOnly cookie). These cannot be disabled as the service cannot function without them.

We do not use advertising, analytics or any other non-essential cookies, so no cookie consent is required. Our traffic statistics come from Umami, a cookie-less tool (see section 5).

5. Third-party services

ChineseReads uses the following third-party services:

• Stripe — to process subscription payments securely. Your card and payment details are handled by Stripe as the payment processor; ChineseReads does not receive or store full card numbers. Privacy policy: stripe.com/privacy
• Umami — for cookie-less aggregate traffic statistics (pages visited and where visitors come from). It sets no cookies and stores no personal data, so it needs no consent. Privacy policy: umami.is/privacy
• DeepSeek API — to generate Chinese learning texts and to power the AI tutor (asking about words and context). Only the text you send is processed, no account or personal data. Privacy policy: deepseek.com/privacy
• Google Cloud Vision — to extract text from uploaded images. Images are processed and not stored. Privacy policy: cloud.google.com
• Google Cloud Text-to-Speech — to generate audio pronunciation of Chinese text, words and sentences. Only the Chinese text to be read aloud is sent, no personal data. Audio is generated on demand and not stored. Privacy policy: cloud.google.com
• Brevo — to send account emails (such as the welcome email when you register) and, only if you opted in, occasional learning tips and news. Your email address and name are shared with Brevo solely to deliver these messages; you can withdraw the optional consent anytime from your profile. Privacy policy: brevo.com/legal/privacypolicy

6. Data retention

Account data is retained as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us. Traffic statistics are anonymous and aggregated and contain no personal data. Records related to payments and subscriptions may be kept for longer where necessary to comply with tax, accounting and anti-fraud obligations, even after the account they belong to has been deleted.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at: victorgarciallorente20@gmail.com

8. Contact

If you have any questions about this privacy policy, please contact us at: victorgarciallorente20@gmail.com