Privacy Policy

Last updated: October 10, 2026

1. Overview

LingoDeck ("we", "us", or "our") operates lingodeck.app, a web application that generates HSK vocabulary flashcards with AI-powered illustrations. This policy explains what data we collect and how we use it.

2. Data We Collect

2.1 Anonymous User ID

When you first visit LingoDeck, we assign a randomly generated anonymous ID (a UUID) stored in a browser cookie. This ID is used to track your free usage quota and purchased credits. It is not linked to your name, email, phone number, or any personally identifiable information.

2.2 Order Records

When you make a purchase, we store the order ID, payment method (PayPal/WeChat/Alipay), amount, your optional note, and timestamp. This is linked only to your anonymous ID.

2.3 Generated Content

Words you enter are sent to our AI providers (DeepSeek for text, SiliconFlow for images) for processing. We do not permanently store the words you input or the cards you generate on our servers. Generated cards are returned to your browser and are not retained.

2.4 Technical Data

Our hosting provider (Cloudflare) automatically logs IP addresses, request timestamps, and browser user-agents for security and rate-limiting purposes. We use this solely to prevent abuse (e.g., excessive API calls) and do not use it to identify you personally.

3. Cookies

We use the following cookies:

• ld_uid — your anonymous user ID (1 year expiry, required for quota tracking)
• ld_admin — admin session token (if you are the site administrator)

We do not use third-party tracking cookies. If you enable Google Analytics in the future, we will update this policy.

4. Third-Party Services

• Cloudflare — web hosting, DNS, and security
• DeepSeek API — AI text generation for vocabulary cards
• SiliconFlow API — AI image generation for card illustrations
• PayPal — payment processing (USD)
• WeChat Pay / Alipay — payment processing (CNY, via manual confirmation)
• Server酱 (sct.ftqq.com) — push notification to the site owner when a payment is received

Each provider processes data according to their own privacy policy. We share only the minimum data necessary to provide the service.

5. Data We Do NOT Collect

• Your name, email, phone number, or physical address
• Your browsing history or behavior on other websites
• Your generated cards or input words (not stored on our servers)

6. Data Retention

• Anonymous user quota data: retained until you clear your browser cookies
• Order records: retained indefinitely for accounting purposes, linked only to your anonymous ID
• Rate-limit counters: automatically expire after 1 hour (per-user) or 24 hours (per-IP)

7. Your Rights

To request deletion of your data (anonymous ID, order records), contact us at the email below. Since your data is linked to an anonymous ID rather than personal information, clearing your browser cookies effectively resets your identity.

8. Children's Privacy

LingoDeck does not knowingly collect data from children under 13. If you believe a child has provided data, please contact us for immediate deletion.

9. Contact

For privacy questions or data deletion requests, contact: [email protected]

10. Changes

We may update this policy. Significant changes will be noted on the homepage.