Privacy

You can use TheoryWay with or without an account. Without an account, your practice progress is saved only in your browser's local storage, on your own device, and never leaves it.

If you create an account, we store your email address and your practice progress on our servers (hosted by Cloudflare), so you can log in on another device and continue where you left off.

If you sign up with a password, we store it in a protected (hashed) form. We can never read your password.

You can also sign in with Google. Google only confirms your email address to us. We do not see your Google password or contacts.

We use one cookie when you are logged in: a session cookie that keeps you logged in. When you sign in with Google, a second small cookie helps finish the sign-in and deletes itself within a minute. We do not use advertising or tracking cookies.

We use Cloudflare Web Analytics, a privacy-friendly service, to count page views. It is cookieless and does not identify you.

Emails from us (for example a password reset link) are delivered by Resend, our email provider. We only send emails about your account — never marketing.

If you buy a pass, the payment is processed by Stripe. We never see or store your card number. Stripe keeps payment records (like receipts) even if you delete your account.

To protect accounts, we keep a short-lived, anonymised (hashed) record of sign-in attempts.

Cloudflare, our hosting provider, processes standard web request information (such as your IP address) to serve the site and keep it secure, the same way any website host does.

You can delete your account on the Account page at any time. This deletes your email address and all your progress from our servers.

This page will be updated if any of this changes.

Questions about this page: support@theoryway.com