Privacy Policy

This Privacy Policy explains how h15n Ventures ("we," "us," or "our") collects, uses, shares, and protects information when you use The Missing Workbook at missingworkbook.com (the "Service").

The short version: we collect the information needed to run an English-learning account, save your study progress, process payments, deliver email, keep the site secure, understand which product surfaces are useful, and respond to support requests. We do not sell your personal information.

1. Information We Collect

Information you provide directly

Account information: email address, password, username, Google account identifier if you choose Google Sign-In, and account settings.
Study information: words, phrases, usage topics, minimal-pair cards, and other items you add to your deck; review answers; ratings; timestamps; streaks; mastery data; activity history; and learning preferences.
Uploaded or pasted learning material: text you submit to reading-assist or writing-analysis features, plus limited metadata such as file name, character count, and skipped-file reasons.
Feedback and support: feedback messages, optional contact email, category, current page URL, browser user agent, and any context you include.
Email preferences: whether you are subscribed to service announcements and when you unsubscribe or resubscribe.
Payment and billing information: plan selection, Stripe customer and subscription identifiers, billing status, receipts, and transaction metadata. Card numbers are submitted to Stripe and are not stored on our servers.

Information collected automatically

Technical logs: IP address, request path, timestamps, browser type, device information, referrer, and security/session information.
Session and security data: signed session identifiers, CSRF protection values, locale/session choices, and similar values needed to keep the Service working.
First-party visit analytics: selected page views for words, phrases, idioms, roots, and affixes. We use Ahoy with cookies disabled, GeoIP disabled, bot filtering, and masked IP addresses.
Marketing attribution: if you arrive through a link with UTM or registered referral parameters, we may store signed first-touch and last-touch attribution cookies. If you create an account, we copy the channel of origin to your user record so we can understand which distribution channels reach learners.
Error and performance data: Sentry may collect exception details, request context, IP address, user identifier, browser/device details, logs, and related technical data when errors occur or performance traces are sampled.
Product analytics: when Microsoft Clarity is enabled, it may collect interaction telemetry such as clicks, scrolls, page navigation, device/browser details, and session diagnostics to help us understand product usability.

2. How We Use Information

We use information to:

Provide, operate, secure, and maintain the Service
Create and authenticate accounts
Save and sync study progress across sessions
Schedule spaced-repetition reviews and show mastery/activity views
Run reading-assist, writing-analysis, pronunciation, and usage-reference features
Process payments, manage subscriptions, and provide billing support
Send account-essential email such as password resets, receipts, welcome email, security notices, and support replies
Send optional service announcements or product updates when you are subscribed
Respond to feedback, bug reports, missing-word reports, legal requests, and privacy requests
Measure aggregate usage and product health
Detect, prevent, and investigate abuse, fraud, security incidents, and service failures
Comply with legal, tax, accounting, and regulatory obligations

We do not use your personal information for third-party advertising. We do not sell your personal information.

3. Legal Bases for Processing

Where a legal basis is required, we process personal information under one or more of the following bases:

Contract: to provide the Service you requested, manage your account, and process paid plans.
Legitimate interests: to secure the Service, improve product quality, prevent abuse, understand usage, respond to support requests, and maintain business records.
Consent: where you choose optional features, use Google Sign-In, subscribe to certain email, or where consent is otherwise required.
Legal obligations: to comply with tax, accounting, payment, law-enforcement, or regulatory requirements.

4. How We Share Information

We share information only with service providers and in the limited situations described below.

Provider Purpose Information involved Stripe Payment processing, subscriptions, receipts, billing portal Email, name or billing details if provided at checkout, payment method held by Stripe, customer/subscription/charge metadata Google Google Sign-In if you choose it Google account identifier, email verification status, email address, and sign-in token data Resend Transactional and service-announcement email delivery Email address, message content, delivery metadata Sentry Error monitoring, logs, and performance diagnostics Error details, technical context, IP address, user identifier, request context Microsoft Clarity Product analytics and session diagnostics when enabled Interaction telemetry, browser/device details, page usage data Hosting and infrastructure providers Application hosting, database, backups, storage, networking Data stored or processed by the Service

We may also disclose information:

To comply with law, legal process, or governmental requests
To protect the rights, safety, property, and security of h15n Ventures, users, or the public
To investigate or prevent abuse, fraud, or security incidents
In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and continuity protections

5. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, security, functional preferences, attribution, analytics, and error monitoring. See our Cookie Policy for details.

6. Data Retention

We keep information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law.

Account and study data: kept while your account is active. If you request account deletion, we aim to delete or anonymize personal account and study data within 30 days unless we need to keep it for legal, security, billing, or fraud prevention reasons.
Submitted analysis text: reading-assist and writing-analysis inputs are processed to produce the requested result. They are not designed as document storage. They may still appear temporarily in request logs, error reports, or browser/session state.
Feedback and support messages: kept for up to 24 months unless a longer period is needed to resolve an issue, investigate abuse, or maintain legal records.
Email delivery logs and outbound email records: kept for up to 24 months for deliverability, unsubscribe, support, and audit purposes.
Marketing attribution: signed attribution cookies may last up to 1 year for first-touch and up to 30 days for last-touch. Account-level attribution is kept while the account exists unless you request deletion.
Payment, tax, and accounting records: retained as required by payment processors and applicable law, often up to 7 years.
Security, technical, and error logs: retained for a limited period appropriate to operations, security, debugging, and compliance.
Aggregated or de-identified statistics: may be retained indefinitely if they no longer identify an individual.

7. Security

We use reasonable administrative, technical, and organizational measures to protect personal information, including TLS for data in transit, password hashing, access controls, secure cookies in production, logging, monitoring, and least-necessary access practices.

No internet service is perfectly secure. Please use a strong password, keep your email account secure, and contact us if you suspect unauthorized access.

8. International Transfers

The Service is operated from the United States and may use providers that process information in the United States or other countries. Those countries may have data-protection laws different from your country. Where required, we rely on appropriate transfer mechanisms or provider terms.

9. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to opt out of certain sharing or marketing and to appeal or complain to a data-protection authority.

We do not sell personal information. We do not use personal information for cross-context behavioral advertising.

You can:

Manage subscription billing at /billing when available for your account
Use the unsubscribe link in eligible emails to change service-announcement preferences
Contact us to request access, correction, export, deletion, or privacy help

To make a privacy request, email missingworkbook@h15n.com. We may need to verify your identity before acting on a request. Some requests may be limited by legal, security, fraud-prevention, tax, accounting, or operational obligations.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us and we will take appropriate steps to delete it.

11. Third-Party Links

The Service may link to third-party websites, references, tools, or resources. We are not responsible for the privacy practices of third parties we do not control.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will be posted on this page. If changes are material, we will provide additional notice when reasonable.

13. Contact

The Missing Workbook is operated by h15n Ventures. Questions or requests about this Privacy Policy can be sent to missingworkbook@h15n.com.