Privacy.

Effective 30 April 2026

ThaiDai is a small, independent learning tool. We collect the minimum needed to keep your progress between sessions and to take payment if you upgrade. We do not sell or share your data, and we do not run any third-party analytics or advertising trackers on this site.

What we collect

• Your email address — used to sign you in via magic link and to contact you about your account or a relevant product change.
• Progress data — your streak, XP, daily count, the words you have practised, and lesson mastery. Tied to your account so it follows you across devices.
• A session cookie — an opaque identifier so that you stay signed in. No tracking, no advertising, no profiling.
• Stripe customer and subscription IDs — only if you upgrade. We never see your full card details; those stay with Stripe.
• Server logs — short-lived request logs (IP, user agent, path) for operational and abuse-prevention purposes. Rotated within 30 days.

What we don't collect

• No third-party analytics, no Google Analytics, no Facebook pixel, no Hotjar.
• No advertising trackers and no data sold or rented to third parties.
• No browser fingerprinting and no behavioural profiling.
• No payment card data — Stripe handles that end to end.

Who processes your data

We use a small number of sub-processors, each scoped to a single purpose:

• Cloudflare — hosting, the D1 database that holds your account and progress, and R2 for audio caching.
• Stripe — payment processing. Receives your email and billing details directly when you upgrade.
• Resend — sends sign-in magic links and account emails to your address.
• ElevenLabs — generates the Thai pronunciation audio. Receives the Thai word text only; no user identifiers are sent.

Cookies

One cookie: a signed session token used to keep you logged in. It is HTTP-only and same-site, and it expires when you sign out or after a period of inactivity. We do not use cookies for tracking or advertising, so there is no cookie banner.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account at any time. Email us and we will action the request within 30 days. Deleting your account removes your progress, your email, and your session — Stripe records are retained where required by accounting and tax law.

Children

ThaiDai is not designed for children under 13, and we do not knowingly collect data from anyone under that age. If you believe a child has signed up, please contact us and we will remove the account.

Changes to this notice

If we change anything material — a new sub-processor, a new category of data — we will update this page and email anyone with an active account. The effective date at the top reflects the latest revision.

Contact

Questions, data-subject requests, or anything that feels off? Send a message and a real human will reply. Subject-access and deletion requests are handled within 30 days per UK GDPR.