Privacy Policy
Last updated: November 5, 2026
The short version
We collect your email, reading activity, and basic usage data to run and improve HSKStory. We don't sell your data. Payments go through our payment partners and the app stores — we never see your card. You can access, export, or delete your data anytime.
1. Who We Are
HSKStory is an online Chinese graded reading platform. Questions about this policy? Email anthony@hskstory.com.
2. What We Collect
- Account: Email address and optional display name. We never store a password.
- Purchases: Subscription status and purchase history, so we can unlock paid features and help with billing questions
- Reading activity: Stories read, progress, saved vocabulary, and flashcard reviews
- How you found us: A general source such as search, social media, or a referring website. It is kept on your device for at most 30 days and saved to your account if you sign up or subscribe.
- Notifications: A device token if you turn on mobile reminders
- Diagnostics: Error reports, crash logs, and device and app version
- Server logs: IP address and basic request information, as part of normal hosting
3. Google Sign-In
If you sign in with Google, we receive your name, email address, language, and a Google account ID. We use them only to sign you in and fill in your profile. We never get your Google password, we don't keep Google access tokens, and we don't share this data except with the service providers that help us run HSKStory. It is deleted when your account is deleted.
4. How We Use It
- Run the service, manage your account, and sign you in
- Process payments and unlock what you bought
- Send sign-in links, account emails, and — only if you opt in — our newsletter and reminders
- Answer support questions and fix bugs
- Understand overall usage so we can improve stories and features
We do not sell your personal data.
5. Service Providers & Storage
We use trusted service providers for payments, app-store purchases, hosting and content delivery, email, push notifications, error monitoring, and product analytics. They process data only to provide these services to us. Some are located outside your country, including in the United States. Web payments are processed by Paddle, our merchant of record; in-app purchases are processed by Apple or Google.
Your data is stored securely. If you delete your account, there is a 30-day grace period in case it was a mistake; after that we delete your account data, except records we must keep for billing, tax, fraud-prevention, or legal reasons.
6. Your Rights
You can access, correct, export, or delete your data, and opt out of marketing emails at any time. Email anthony@hskstory.com for any of these, including deleting data held by our service providers.
7. Cookies
We don't use advertising cookies. We use essential cookies and local storage for sign-in and reader preferences.
8. Children's Privacy
HSKStory is not directed to children under 13, and we do not knowingly collect their personal data.
9. Changes
We will email you about material changes to this policy before they take effect.