Privacy Policy
Our commitment to privacy by design: zero trackers, zero personal telemetry, and complete data ownership.
1. Core Principles: Privacy by Design
GLORY-TIKTOK is designed as an educational vocabulary platform built on the philosophy of maximum respect for learner privacy. We believe that learning should never come at the expense of your personal data.
- Zero Telemetry: We do not track your browsing habits, page views, mouse movements, or keystrokes.
- No Third-Party Trackers: No Google Analytics, Meta Pixels, advertising cookies, or behavioral trackers are loaded on this site.
- Anonymous & Offline First: You can study all 4,090 vocabulary words using smart spaced repetition (FSRS) completely offline without ever creating an account.
2. What We Store (and What We NEVER Collect)
| Data Category | What We Store | What We NEVER Store |
|---|---|---|
| Local Device (IndexedDB) | FSRS intervals, review history, custom settings stored directly inside your browser database (glory_srs_db). | None of this leaves your device unless you choose to sign in to cloud sync. |
| Cloud Sync (Optional via Google) | An anonymous technical subject identifier (sub) provided by Google, your encrypted session cookie, and your flashcard study progress. | We NEVER collect or store your real name, email address, profile photo, contact list, or IP address. |
3. Why We Use Google Sign-In
When you choose to synchronize your flashcard progress across multiple devices, we use Google Identity Services for one-tap verification. We do not require passwords, eliminating the risk of credential leaks. The server receives only an opaque numeric identifier (sub) to distinguish your encrypted study records from others.
4. Data Ownership: Export & Permanent Deletion
You own 100% of your learning data. At any time via the Account page, you can:
- Export Everything (Data Portability): Download a complete JSON file (
glory-srs.v1format) containing all your cards and review logs. - Permanent Cloud Deletion (Right to be Forgotten): Delete your cloud account with one click. This instantly and irrevocably purges all associated records from our Cloudflare D1 database.
5. Infrastructure & Security
Our backend runs on Cloudflare serverless edge infrastructure (Cloudflare Pages Functions and Cloudflare D1). Session cookies are secured with HttpOnly, Secure, and SameSite=Lax flags, preventing script access and CSRF exploitation.