VocabMaster
Privacy Policy
Last updated 2026-04-18
This Privacy Policy describes how VocabMaster collects, uses, and protects your personal information when you use our Service at vocabmaster.cc.
1. Information We Collect
| Category | Examples | Purpose |
|---|
| Account data | Email, name, password (hashed), role | Authentication, account management |
| Learning data | Words studied, mastery scores, quiz results, time spent | Progress tracking, SRS scheduling |
| Payment data | Subscription tier, transaction IDs (via Paymob) | Billing — we do NOT store card numbers |
| Technical data | IP address, browser type, device info, logs | Security, debugging, abuse prevention |
| User content | Custom courses, transcripts, discussion posts | Providing the Service |
2. How We Use Your Data
- To provide and personalize the learning experience
- To process payments and manage subscriptions
- To send transactional emails (password resets, welcome emails, receipts)
- To detect and prevent fraud, abuse, and security threats
- To analyze usage and improve the Service (aggregated, non-identifying)
3. Third-Party Services
We share limited data with the following providers strictly as necessary:
- Paymob — payment processing (billing data)
- Brevo (Sendinblue) — transactional emails (email address, email content)
- DeepSeek — AI generation of lesson content (transcript text you upload)
- Adsterra — in-page banner and native ads shown only to free-tier student accounts. Adsterra may set cookies or use anonymous identifiers to limit ad repetition and measure performance. Adsterra does not receive your name, email, or account data. Paid subscribers never see Adsterra ads.
- Monetag — two separate free-tier formats: (a) browser push notifications via the browser's native notification system (opt-in only) and (b) an in-page floating notification card shown at most once per session. Monetag may set anonymous identifiers to manage delivery frequency. You can revoke push permission at any time in your browser's site settings; the in-page card is dismissible. Paid subscribers never see Monetag ads.
4. Data Retention
We retain account data as long as your account is active. After deletion, personal data is removed within 30 days, except where retention is required by law (payment records up to 7 years for tax compliance).
5. Your Rights
- Access — request a copy of your personal data
- Correction — update inaccurate information
- Deletion — delete your account and personal data
- Export — receive your data in a portable format
- Withdraw consent — opt out of non-essential processing
To exercise these rights, email privacy@vocabmaster.cc or use account settings.
6. Children
The Service is not directed at children under 13. Users between 13 and 18 must have parental consent. If we discover we have collected data from a child under 13 without parental consent, we will delete it promptly.
7. Security
Passwords are hashed with bcrypt. Connections are encrypted via HTTPS/TLS. We implement rate limiting, input validation, and access controls. Report any suspected breach to security@vocabmaster.cc.
8. Cookies & Storage
- LocalStorage / SessionStorage — keeps you logged in and stores preferences (including your ad-consent choice in
vm_ads_consent)
- Third-party advertising cookies — shown only to free-tier users, and only after you accept the ad-consent banner. Adsterra (in-page banners) and Monetag (push notifications) may set cookies for frequency capping and attribution. Paid subscribers are never served these cookies.
- No analytics tracking cookies currently
You can withdraw ad consent at any time by clearing vm_ads_consent in your browser's localStorage. Paid subscribers never see the banner or any ad cookies.
9. International Data Transfer
Our servers and some third-party providers may be located outside Egypt. By using the Service, you consent to this transfer.
10. Changes
We will notify users of material changes at least 14 days in advance via email or in-app banner.
11. Contact
Privacy questions: privacy@vocabmaster.cc