Privacy Policy
Effective Date: October 27, 2026
ReadLevels (readlevels.org) collects as little as we can to run the product.
1. What we collect
- The Manager's email address and password (the password is stored only as a hash)
- Waitlist email: the address you leave while registration is closed
- Display name you choose for the Learner (we do not require a legal name, phone number, school, or ID documents)
- A hashed Learner PIN, set in the Manager account
- Language preference
- Quiz answers, scores, and learning reports tied to the Learner
- Basic technical logs (IP, browser, time) and session data so we can keep you signed in and enforce sign-in limits (two places for the Manager, one for each Learner)
- Redemption records: which code was redeemed, which Learner it was applied to, when, and the membership start and end dates; plus each Learner's report-trial usage and MP3 download count
- Anonymous usage statistics: a random ID that lasts only for the current browser tab, device type (phone / tablet / desktop), the page visited, and the article and level. These statistics are not linked to your account
We do not collect government IDs or phone numbers. This site does not take payments or collect card numbers. If you pay us off-site for a redeem code, we keep the order number or payment record only to match the code and handle refunds.
2. Cookies and browser storage
We use only the storage the site needs to work. We do not use advertising or third-party tracking cookies:
- Sign-in session cookies: keep you signed in and tell this device apart
- Listening cookies: issue short-lived audio links and limit request rate
- A language-preference cookie
- A home-intro cookie: remembers that you closed the intro message on the home page
- Waitlist prompt flags (browser local and session storage): remember that you joined the waitlist and that the prompt was already shown this visit, so we do not ask again
- The family code on this device (browser local storage): makes it quicker to enter a Learner here; you can clear it at any time
- The anonymous statistics ID (browser session storage): gone when you close the tab
3. How we use it
- Create and sign you in
- Save history and reports
- Send verification and service email (expiry reminders, not ads)
- Tell the waitlist when registration opens (to be removed, write to contact@readlevels.org and we delete the address)
- Understand which pages and articles are used, so we can improve the product
- Stop abuse and keep the site up
We do not sell or rent your email to advertisers.
4. Who else sees it, and where it lives
We use other companies only to run the product: email delivery, hosting, and the checkout provider if you pay off-site. Each of them gets only what they need for that job.
Because we are based in the United States, your data may be stored in the U.S. or in the region where we host the site.
5. Security
We encrypt data in transit and hash passwords and PINs. No method is perfect.
6. Your rights and deletion
On the account page, the Manager can correct display names, PINs, the sign-in email, and the password, and can disable a Learner. A disabled Learner can no longer be entered; its learning records are kept.
To see your data, delete a Learner's records, or close the whole Manager account, write from the Manager email to contact@readlevels.org.
When we close a Manager account, we disable login at once. We remove the email, display names, and learning records from active systems within 30 days. Where the law requires us to retain security or accounting records, we keep them with identifying details removed.
7. Children
If the Learner is under 13 (or under the online-consent age where you live), a parent or guardian must create the Manager account and agree to this policy. At sign-up you must confirm that you are 18 or older, or a parent or guardian.
If you believe a child under 13 registered a Manager account on their own, contact us and we will delete it.
Questions: contact@readlevels.org