In short: KYW does not live off your data. There are no ads, nothing is sold or passed on, and what is collected is what the service needs to work. Below is what exactly, where it is kept and for how long.
What we store
- Your email – you log in with it and recover your password through it. It is not needed for anything else: we run no mailing lists.
- Your password, as a hash only – it is stored nowhere in plain form and cannot be recovered, which is why a forgotten password is replaced rather than “reminded”.
- Your dictionary – words, definitions, transcriptions, tags, synonyms, examples and the texts of packs.
- The history of your answers and the schedule – without it the algorithm cannot set the next repetition and the statistics cannot show what is holding and what has slipped.
- Your settings – limits, retention target, interface language, theme.
- Published packs – if you send a pack to the shared library, everyone can see it. Your own dictionary stays private.
What we do not do
We do not sell or hand data to third parties, show no ads, plug in no external counters or trackers, and collect nothing about you beyond the list above.
Where it lives and who else sees it
The server and the database are in the Netherlands. Emails – the confirmation code and password recovery – are sent by the mail service Resend, which sees the address and the text of the message itself. For visitors from Russia the site is reached through an additional relay server in Russia: it passes requests on, while the data is kept in the same place, in the Netherlands.
Analytics
Our own, on the server, with no external counters. A visit is recorded as an aggregate: the day, the type of visitor, the page, where they came from. The visitor is recognised by a short hash of the address and the browser with a daily salt: the salt changes with the day, so yesterday’s visit cannot be linked to today’s, and no raw IP addresses stay on disk.
Cookies
- kyw_session – the login. Lives up to 90 days, removed when you log out.
- kyw_src – where you arrived from. 30 minutes, so that one arrival is counted once.
- kyw_nocount – a “do not count this visitor” mark: the owner of the site sets it for themselves so their own visits stay out of the statistics.
There is not a single advertising or third-party cookie – which is why there is no consent banner either: without the technical cookies the login simply would not work.
How long it lives
The dictionary, the answers and the settings – as long as the account exists. The anonymised visit statistics stay indefinitely, but cannot be tied back to a person. Deleting the account removes the words, the answers, the schedule, the statistics and the packs at once and in full: no copies are kept “just in case”.
Your rights
The dictionary can be exported at any moment as a single file, progress included. The account is deleted by you, in the settings. If you need something else – what exactly is stored about you, a correction, a partial deletion – write to support@keepyourwords.org.
If something changes
This page changes together with the service. If anything substantial changes – what is collected, where it is kept or who else sees it – it will be written here, and not in small print somewhere else.