Privacy Policy

1. Information handled

No registration is required, and the service is not designed to directly collect your name, phone number, or address.

• On-device data: learning language, interface language, and Chinese reading settings may be stored in localStorage. Learning progress, wrong-answer records, and wordbook entries are stored in IndexedDB for each language pair. The daily-quiz session (selected words, current game, question order, exposure counts, correct, wrong and timed-out answers, and current position), daily-quiz achievements, recovery code, and backup state may also be stored in localStorage.
• Milestone cloud backup: when a backup condition is met, such as the first completion of a stage section or final completion of the daily quiz, language settings, learning progress, wrong-answer records, wordbook entries, and daily-quiz achievements may be backed up. Daily-quiz achievements may include the language pair, completion dates, current and best streaks, total clear days, latest completion time, and time zone. The backup is encrypted in your browser with AES-GCM before transmission and stored on the server as ciphertext. The daily-quiz session is not included in the backup and stays on that device. The server may process a random backup ID, ciphertext, storage time, data size, record count, and change or integrity values. The recovery code and unencrypted learning records are not sent.
• Analytics data: the main pages for all 12 languages may load Google Analytics 4 through Google Tag Manager. Page URL and title, access time, referrer, approximate location, browser and device information, and service-use information may be sent to Google. Google Analytics may use first-party cookies such as _ga or similar technologies.
• Hosting and security data: Cloudflare or Google may process IP address, request time, requested URL, browser and device information, network data, and security signals while serving the site and protecting cloud-backup requests.
• Inquiry data: an email address and message are processed when you contact support.

2. Purposes

Information may be used to provide the service, retain settings, back up and restore learning records, fix errors, prevent abuse, maintain security, answer inquiries, and understand service use. If advertising is introduced later, it may also be used to serve ads and measure advertising performance.

3. Cookies, Google Analytics and Google AdSense

The service uses browser storage technologies to retain settings and analyse usage. Google Analytics 4 may run through Google Tag Manager when a main page loads. The service currently has no separate consent banner or consent management platform (CMP).

Google AdSense advertising code is not currently installed. If Google AdSense is used later, Google and other third-party vendors may use cookies to serve ads based on prior visits to TentenQuiz or other websites. Google’s advertising cookies may allow Google and its partners to show personalised ads based on visits to this and other sites.

Manage personalised ads at Google Ads Settings or participating vendors at AboutAds. Learn how Google uses partner-site information at Google’s partner-sites policy.

Blocking cookies or browser storage may prevent language settings, progress, wrong answers, wordbooks, daily-quiz progress, or backup state from being retained.

4. Retention and deletion

• On-device data remains until you remove it through the browser or service.
• Encrypted cloud backups may remain until deleted through the service or the backup service ends. Without a recovery code, the operator cannot identify a backup by name or email.
• Inquiry emails are kept as needed for support and disputes, or longer where law requires.
• Hosting, security, and advertising providers follow their own retention policies and applicable law.

5. External services and international processing

• Google Tag Manager and Google Analytics 4: manage analytics tags and analyse service usage.
• Google Firebase and Firestore: store and process ciphertext and backup metadata for the milestone-based encrypted cloud backup.
• Firebase App Check and reCAPTCHA Enterprise: verify that cloud-backup requests come from the genuine app and reduce automated abuse. Google may process IP address, browser and device information, request and security signals, App Check or reCAPTCHA tokens, and related cookies such as _GRECAPTCHA. This security process is not implemented to read plaintext learning records.
• Cloudflare Pages and Cloudflare R2: Pages serves the static web app, learning-data files, and other site resources; R2 serves pronunciation audio. Cloudflare may process IP address, request time, requested URL, browser and device information, and ordinary network data.

Information may be processed on servers outside your country. Details and retention follow each provider’s privacy policy and applicable law.

The service currently has no separate CMP. Before serving ads in the EEA, United Kingdom, Switzerland, or another region where law or Google policy requires consent, an appropriate consent process will be implemented.

6. Children’s privacy

TentenQuiz is an educational service for a broad audience but does not intentionally collect personal information from children under 13. Such learners should not send personal information directly and should ask a parent or guardian for help. If unauthorised collection is discovered, reasonable steps will be taken to delete it.

The operator does not intend to create personalised-ad profiles based on activity known to belong to a child under 13 and applies age-related treatment where required.

7. Your choices and rights

You can view or delete on-device data through browser or service controls and manage encrypted backups with a recovery code. Browser settings can restrict analytics cookies and browser storage, and personalised ads can be managed in Google Ads Settings. Because backups are not linked to a member account, only a person with the recovery code can restore or delete one. Contact us to request access, correction, or deletion of inquiry data held by the operator.

8. Security

Reasonable measures include protected transmission, AES-GCM encryption performed in the browser before cloud transmission, hard-to-guess recovery codes, and database access rules. This does not mean that every item in localStorage and IndexedDB is separately encrypted on the device. No Internet transmission or electronic storage method can be guaranteed absolutely secure.

9. Policy changes

This policy may change when the service, law, or relevant policies change. Important revisions will be announced in the service or through an updated effective date.

10. Contact

Privacy contact: TentenQuiz operator
Email: [email protected]