Privacy Policy

This policy applies to HanziSheets at hanzi.hubindev.cc. The independent operator of HanziSheets controls personal data used to run accounts and provide the service. Paddle separately controls personal data it processes as Merchant of Record for a purchase.

• Account data: name, email address, a securely hashed password, account identifiers, and account timestamps.
• Session and security data: session tokens, expiration times, IP address, browser or device user-agent, and security-related records.
• Technical data: ordinary server logs such as request time, route, status, IP address, and diagnostic information needed to secure and operate the service.
• Purchase data: when Pro purchasing is available, Paddle may share customer identifiers, email, country, transaction identifiers, product, price, tax, and entitlement or refund status. HanziSheets does not receive or store your complete payment-card number.
• Support data: information you choose to include when requesting help.

Worksheet text and settings are currently processed in your browser and are not saved to your HanziSheets account. To render stroke order, the browser requests data for each unique Chinese character from jsDelivr's copy of hanzi-writer-data. This means the requested character and normal connection information, such as your IP address, are visible to that delivery provider.

English dictionary data is served from HanziSheets itself. Printing uses your browser's print dialog. If cloud saving is introduced later, this policy will be updated before saved worksheet content is collected.

• create accounts, authenticate users, and keep sessions secure;
• deliver purchased Pro access and respond to account or payment events;
• prevent fraud, abuse, and security incidents;
• maintain, diagnose, and improve reliability;
• respond to support and privacy requests;
• meet tax, accounting, consumer-protection, and other legal obligations.

Depending on your location, these uses rely on performing a contract, legitimate interests in operating and securing the service, compliance with law, or consent where consent is required.

HanziSheets uses essential authentication cookies to keep signed-in users logged in and protect sessions. We do not currently use advertising cookies or third-party analytics. Paddle Checkout may use its own cookies and similar technologies under Paddle's privacy notice. Because HanziSheets currently uses only essential first-party cookies, it does not display a marketing-cookie consent banner.

• Infrastructure providers that host the application, database, network, and backups.
• jsDelivr when your browser retrieves public stroke-order data.
• Paddle for checkout, payment, tax, fraud prevention, transaction support, refunds, and purchase fulfilment.
• Authorities or professional advisers where disclosure is required by law or reasonably necessary to protect rights and security.

We do not sell personal data or share it for behavioural advertising.

Paddle is the authorised reseller and Merchant of Record for Pro purchases. Payment and checkout data submitted to Paddle is governed by the Paddle Privacy Policy. Paddle may share limited buyer and transaction data with HanziSheets so we can fulfil and support your purchase.

Account data is kept while your account remains active and for a reasonable period afterward where required for security, disputes, or law. Expired sessions and short-lived verification records are removed or become unusable according to their expiration. Purchase and accounting records may be retained for legally required periods. Support and server-log data is kept only as long as reasonably necessary for its purpose.

We use access controls, hashed passwords, encrypted HTTPS connections, restricted database access, and other reasonable safeguards. No internet service can guarantee absolute security. Providers such as Paddle or jsDelivr may process data in other countries and use legal transfer safeguards where required.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent where processing relies on consent. You may also complain to your local data-protection authority.

To make a request, contact the HanziSheets operator. Do not post identity documents or sensitive account information publicly; ask first for a private contact channel. We may need to verify that the request concerns your account.

HanziSheets may be used as an educational tool, but accounts and paid purchases are not directed to children who cannot consent under applicable law. A parent, guardian, school, or teacher should supervise use and provide any consent required locally.

We may update this policy when product features, providers, or legal requirements change. The latest version and update date will remain available on this page. Material changes will be communicated where reasonably possible.