z.tou.gg Open the app

Privacy policy

This page explains what z.tou.gg stores, who can see it and how to delete it.

Updated:

In short

  • Without an account, your progress stays on this device only, in the browser’s storage.
  • With an account, your progress is stored on our server so it syncs between your devices.
  • There is no password. Face ID and fingerprints never leave your device: the server receives only the passkey’s public key.
  • You can delete your account at any time: Me → Account → Delete account.

What an account stores

  • Your name (optional) — shown on the friends board.
  • Your invite code and who invited you.
  • Your interface language.
  • Your passkey’s public key, or a hash of your recovery code (the code itself is not stored).
  • Signed-in devices: device and browser name, last active time.
  • Learning data: the state of your word cards, settings, lists and daily XP.

Cookies and on-device storage

z.tou.gg does not use cookies. The app keeps these in your browser’s storage (IndexedDB and localStorage): progress and settings, interface language, invite code, recent searches and your sign-in key. Clearing the site’s data in your browser settings removes them.

Who can see what

  • Friends board: the person who invited you, the people you invited and others invited by the person who invited you see your name and weekly XP.
  • Other users do not see your progress.

Service providers

Data is processed only through these services:

  • Cloudflare — website, server and database. Your IP address is used to deliver and protect the site (for example, to limit repeated attempts). Technical logs (request address, time, errors) are kept for a few days. Servers may be outside Uzbekistan.
  • GoatCounter — visit statistics without cookies: page, referrer, browser, screen size and country. IP addresses are not stored.
  • jsDelivr — delivers the stroke-order files.
  • Telegram — only if you choose to share through Telegram.

Retention and deletion

Account data is kept until the account is deleted. Me → Account → Delete account deletes your account and all your data on the server immediately; it may remain in the provider’s backups for up to 30 days. Progress on a device stays until you clear the browser’s data. Remove the passkey in your device’s password settings.

Changes

If this policy changes, the new version is published here with its date.

Contact

Questions: Telegram @toudotgg or polatovmaqsudjon1@gmail.com.

Open the app