A little clarity about privacy.

Yappaca stores your email address, display name, salted password hash, learning preferences, lesson answers, vocabulary reviews, and learning activity on the server hosting this instance. We use that information to sign you in, save progress, and schedule practice.

No ads or advertising trackers.

We don’t embed advertising, third-party analytics, or remote font services. Essential cookies maintain your sign-in session and your guest lesson. The theme preference is stored in your browser. Passwords are hashed with bcrypt; plain-text passwords are never stored.

Offline downloads.

You can choose to store public course content in this browser for offline practice. Downloads include lesson answers, and anyone using this browser can open them. They stay after logout or account deletion until you remove them from the downloads page or clear browser data. Account pages, sessions, and learning history are never cached for offline use. Offline answers stay only in the open page and are not synced to your account.

Listening exercises.

Speech uses your browser’s text-to-speech engine. Some browsers or operating systems may use a network service to generate speech. You can use the text fallback when audio isn’t available. Courses can optionally reference externally hosted audio; your browser contacts that host when you play it.

Take your data with you.

You can download your learning data or permanently delete your account in Settings. Deletion removes your profile, attempts, activity, reviews, and achievements from the live database. The operator of your self-hosted instance controls infrastructure logs, backups, access, and retention.

Self-hosting and support.

Yappaca has no mandatory central service. For privacy or security questions about this instance, contact its operator. Security reporting guidance is included in SECURITY.md in the source distribution. Learner profiles aren’t publicly shared by this MVP.