Privacy
You can use TheoryWay with or without an account. Without an account, your practice progress is saved only in your browser's local storage, on your own device, and never leaves it.
If you create an account, we store your email address and your practice progress on our servers (hosted by Cloudflare), so you can log in on another device and continue where you left off.
If you sign up with a password, we store it in a protected (hashed) form. We can never read your password.
You can also sign in with Google. Google only confirms your email address to us. We do not see your Google password or contacts.
We use one cookie when you are logged in: a session cookie that keeps you logged in. When you sign in with Google, a second small cookie helps finish the sign-in and deletes itself within a minute.
On your first visit we ask whether you accept advertising cookies. If you accept, we use the Meta (Facebook) pixel to see whether our ads reach people who actually find TheoryWay useful. It sets cookies and tells Meta which pages you opened here, and if you create an account it also sends your email address in a scrambled (hashed) form that Meta can match but cannot read. If you decline, none of it loads and nothing is sent. To change your answer, clear this site's data in your browser and choose again.
We use Cloudflare Web Analytics, a privacy-friendly service, to count page views. It is cookieless and does not identify you.
Emails from us (for example a password reset link) are delivered by Resend, our email provider.
You can also ask for our free practice email. It is optional, and you do not need an account for it. We store your email address, the language you chose, and which page you asked from.
Nothing is sent until you click the confirm link in the first email. That first email is the only one we send before you confirm. These emails are delivered by Resend too.
Every practice email has a one-click unsubscribe link. It works straight away, with no login. After you unsubscribe we keep your address on a do-not-email list, so that nobody can add you again by mistake. If you want it erased completely, write to support@theoryway.com and we will delete it.
If you buy a pass, the payment is processed by Stripe. We never see or store your card number. Stripe keeps payment records (like receipts) even if you delete your account.
To protect accounts, we keep a short-lived, anonymised (hashed) record of sign-in attempts.
Cloudflare, our hosting provider, processes standard web request information (such as your IP address) to serve the site and keep it secure, the same way any website host does.
You can delete your account on the Account page at any time. This deletes your email address and all your progress from our servers.
This page will be updated if any of this changes.
Questions about this page: support@theoryway.com