Privacy Policy
Last updated 31 July 2026
Bhasaly is a language-learning site. You can use every course, the alphabet pages, the phrasebooks and the Religious studies stories without an account and without giving us anything at all. This page explains the few cases where data is involved.
What is stored, and where
| Data | When | Where it lives |
|---|---|---|
| Your progress — XP, streak, lessons completed, review cards, words learned | As you learn | Your browser only, unless you log in |
| Preferences — theme, romanization, sound, voice, daily goal | When you change a setting | Your browser only. Never uploaded, even when logged in |
| Email address | Only if you choose to log in | Supabase (our database provider) |
| A copy of your progress | Only if you choose to log in | Supabase, so it can sync between your devices |
| Feedback you send — your message, your email if you supply one, and a short technical note (language, current page, screen size) | Only when you press Send feedback | Netlify Forms |
| Anonymous usage counts — pages opened, lessons started and finished | As you use the site | Aggregated by our analytics provider |
Cookies
Bhasaly sets no advertising or tracking cookies, and there is no consent banner because none is needed. If you log in, your session token is kept in your browser's local storage so you stay signed in. Your progress and preferences are kept the same way.
Analytics
We count how many people open the site and how far they get through a course, so we can tell which lessons are confusing and which languages people actually want. This is cookieless and aggregate: no profile is built, nothing is sold or shared for advertising, and the data recorded is limited to language codes, lesson identifiers and counts. Your email address, your answers and anything you type are never sent to analytics.
Who else sees your data
- Supabase — stores your email and synced progress if you log in.
- Netlify — hosts the site and receives feedback-form submissions. Like any web host, it processes your IP address to serve pages.
- Google Fonts — typefaces are served from Google's servers, which means your IP address is visible to Google when a page loads.
- jsDelivr — serves the login library, and is only contacted if you actually open the login box.
- Our analytics provider, for the aggregate counts described above.
Nothing is sold, rented, or shared with advertisers. There is no advertising on Bhasaly.
Your rights
Wherever you live, you can:
- Use the site without an account, in which case nothing personal reaches us at all.
- Erase everything on your device — Settings → Reset all progress.
- Delete your account and its stored copy — Settings → Delete account, once you are logged in. This removes your synced progress and your login record.
- Ask for a copy of your data, or ask us to correct it, using the contact below.
If you are in the UK, the EU or another region with similar law, these are your rights of access, rectification and erasure. We do not need to charge for them and we will not.
Children
Bhasaly is suitable for all ages, but an account is not intended for children under 13. We do not knowingly keep a stored email address for a child under 13 — if you believe we have one, contact us and it will be removed. Learning without an account stores nothing off your device.
Keeping data
Progress synced to your account is kept until you delete your account. Feedback messages are kept as long as they are useful for fixing what they report. Local data stays on your device until you clear it.
Contact
Everything reaches us the same way — questions, corrections, and privacy requests including access and deletion. Messages go to a monitored inbox, and you can leave your email if you would like a reply.
Changes
If this policy changes materially, the date at the top changes with it.