Privacy policy
Last updated: 29 October 2026
In short: you can use Ivrit Road without an account, and then your progress stays on your own device. If you create an account, we keep only what's needed to sync your progress and, if you ask for them, send reminder emails. There are no ads, no advertising or analytics companies, and we never sell your information. Two things are on unless you turn them off: the app keeps simple counts (questions answered, errors, one visit a day) for us, with an opt-out on the About tab; and if you're signed in, your approximate location (country and city, from your internet address) is looked up about once a month through an outside service and included when you send us a message. Signed-in learners appear on the public scoreboard as first name and family initial, with a "Hide me" option.
Who runs Ivrit Road
Ivrit Road at hebrew.top is run by Yosef Chaim Cope. You can contact us with Send a message at the bottom of the app.
Using the app without an account
Your progress (XP, streak, minutes practised, words you've learned, which kinds of question you find tricky, and your settings) is saved only in your browser, on your device. It isn't sent to us. Clearing your browser data deletes it, so the Progress page lets you make a backup.
If you create an account
We store:
- Your email address and username, to identify your account.
- Your password, which is stored only in a scrambled (hashed) form that no one can read, including us. If you sign in with Google, we don't get a password: Google shares your name and email address with us.
- Your learning progress: XP, practice days and minutes practised each day, the words you're learning, which kinds of question you find tricky (so the app can practise them with you) and your app settings, including how you asked to be addressed (אַתָּה or אַתְּ) and whether you chose to practise with a man or a woman, so they sync between your devices.
- Your reminder settings, if you turn reminders on: how often, the time you chose, your time zone, and whether you want them by email, as a notification on your device, or both. If you choose notifications, the address the browser's push service gives us for that device (an opaque string that identifies the device to that service and nothing else, with its two encryption keys) and a short description of the browser, so the reminder can be sent there.
- Your device's time zone and language, saved with your progress. The time zone sets the time your reminders are sent.
- Roughly where you are: the country, area and town your internet connection appears to be in, so the person who runs Ivrit Road can see where learners are using the app. Once a month, while you're signed in, your browser asks a public address-lookup service (ipwho.is, ipapi.co or get.geojs.io) where your connection is. That service sees your IP address; we don't receive it and never store it. Only the country, area and town it replies with are saved with your progress. It is a rough guess, often the nearest large town or your mobile network's hub rather than where you are, and it is never a street address. The app never uses your device's own location, and nothing is looked up if you use Ivrit Road without an account.
Reminders
Reminders are off unless you turn them on. Each email includes your username, your streak and a few Hebrew words due for review; a notification carries the same in a line or two. Every email has a one-click unsubscribe link, and you can switch reminders off, or switch between email and notifications, any time in your account; choosing email again, or signing out, removes the device's push address from our database. No reminders are sent on Shabbat or chagim. We also send emails that are needed for your account, such as confirming your address or resetting your password.
What the person who runs Ivrit Road can see
For accounts, the person who runs Ivrit Road can see totals (for example, how many learners practised this week) and a list of learners showing each one's username, email address and whether it's confirmed, sign-up date, last sign-in time, last practice day, how many days they've practised, how many words are in their review list, XP, level, best streak, reminder setting and when a reminder was last sent, how they sign in, and the country, town, time zone and browser language described above. This is used only to run the service and to help you if you get in touch, and it isn't shared with anyone. The same screen is used to delete an account at your request, which erases it along with its progress and reminder settings.
Services we use
- Supabase stores accounts and synced progress, and handles sign-in.
- Resend delivers emails (account emails and reminders).
- Google handles sign-in if you choose "Continue with Google", and supplies the app's fonts.
- Wasmer hosts the website.
- ipwho.is, ipapi.co and get.geojs.io tell your browser which country and town your internet connection is in, as described above.
- Web3Forms delivers messages you send with "Send a message" (and mistake reports). If you are signed in, the message also carries your username, account ID and account email address (as the reply address) so we can follow up; if you aren't, it says so, and an email address you type into the email box is used as the reply address. Every message also carries technical details to help troubleshoot: your browser and device type, language, time zone, screen size, display settings, network type, speech support, the app version and any recent app errors, plus, if you are signed in and already have one saved, your approximate location (country, region and town). It never includes your password.
Like most websites, these services may briefly process technical information such as your IP address in order to deliver pages, fonts and emails. Each handles data under its own privacy policy.
Speaking practice and the microphone
Speaking practice, and the optional microphone buttons in the games, use your browser's own speech recognition. Ivrit Road only listens after you tap a microphone button. Your browser sends what you say to its speech service (for example Google in Chrome and Edge, or Apple in Safari) to turn it into text. Ivrit Road never records, keeps or receives your voice. You can hide the microphone buttons in the games' settings.
Question counts
To find questions that are badly worded, the app counts how often each question is answered and how often the answer was wrong, and sends those counts to our database in small batches. The counts contain the question's text and the part of the app it came from, and nothing else: no account, no device, no time of day, and no record of who answered. You can switch this off in Settings, on the About tab. Teachers who run a class see their learners' progress, but these question counts are never linked to a person. The same switch covers error counts: when something in the app goes wrong, it counts the error once per visit (the app version, where it happened and the message, with any email address, link or token removed first), so that a broken release is noticed and fixed; again no account, no device and no time of day. For an error, the app also sends one fuller report per distinct error per visit (at most ten): the stack trace with file names and line numbers only, the screen the app was on, the browser family and version, and whether someone was signed in (yes or no, never who); it is scrubbed the same way, kept for 30 days and then deleted. The same switch also covers a daily visit count: once a day, this browser tells our database that it opened the app, as a guest or signed in, using a random id the browser made up for itself and keeps only on this device. The id says nothing about you and is never linked to an account, no address or page is recorded, and rows are deleted after 90 days. It lets us see how many devices use the app in a day, a week or a month, and nothing more.
Classes
If you join a class, the class's teacher can see your name, your level, your XP, how many lessons you've finished, how many days and how many minutes you practised in the last month, when you last practised, how many questions you answered and how many were right, the words you have most often answered wrong and your most recent wrong answers, the question types the app finds you weak in, the real-life questions you missed, and your progress in the courses the teacher assigned, including whether you finished by a date they set, and how many of the words on the class's word list you know. They can't see your email address or your settings. You can leave a class at any time on the Classes page, and the teacher then sees nothing further.
Invitations. A teacher can invite people to a class by typing their email addresses. We keep each address with the class, together with when the invitation was sent and whether it was accepted or declined, so the teacher can see who has joined; the teacher can remove an address at any time, and deleting the class removes them all. The invited person gets one email, sent through Resend, with a link that joins the class after they sign in or create an account. Nobody joins a class without opening that link or pressing Join, and if you sign in with an invited address you can also answer "No thanks". Invitations aren't used for anything else, and no further email follows unless you join.
The scoreboard
If you have an account, you appear on the scoreboard unless you hide yourself, which you can do at any time on the scoreboard page ("Hide me from the scoreboard"). It shows your first name and the first letter of your family name (shortened in our database, so your full name isn't sent to other people's browsers), your XP, your rank and your level. Anyone visiting the site can see the scoreboard.
Challenge a friend
A challenge link is made on your device and holds only: the name shown on the challenge (the one you type; if you leave it empty, the link says "Someone" and no name goes in it, even when you're signed in), your score out of 20, your time, the level of the questions and a number that picks the same 20 questions for your friend. A reply link also holds the challenger's name, score and time. Nothing else goes in it: not your email, progress, words or account. The link isn't stored by Ivrit Road; anyone you send it to can read what's in it, and the app removes it from the address bar once it opens. Like any page request, opening it is handled by our host, Wasmer, like any page request (see Services we use).
Mistake reports
The "Report a mistake" button in the games sends what you type, the name of the game and the Hebrew lines on your screen, through Web3Forms, to the person who runs Ivrit Road. It also includes the app's version and, if any errors happened recently, a short description of them. It doesn't include your name, email address or progress.
The same goes for the flag on a word (in the cards, the review and Look up): it sends the word, the kind of mistake you pick and what you type. A copy of every report, from a word or from a game, is also kept in our database so the person who runs Ivrit Road can see them in one place and fix the recordings. The copy holds the word or the Hebrew lines on your screen, the name of the game or practice mode, what you typed, your username if you are signed in (otherwise "guest") and the name or contact you chose to type. It holds nothing else about you or your device. Only the person who runs Ivrit Road can read it. Reports that have been dealt with are deleted after 60 days, and every report after 180 days at the latest.
What we don't do
- No advertising and no ad networks.
- No third-party analytics and no tracking cookies.
- We never sell or rent your information, or share it for marketing.
Error notes
If something goes wrong in the app, it keeps a short note of the error in your browser so problems can be fixed. These notes are only sent if you choose to: mistake reports include the last few, and the Copy diagnostics button on the Progress page copies them for you to send. Email addresses, sign-in details and progress are removed first.
Your browser's storage
The app saves your progress and preferences in your browser's local storage. If you sign in, it also stores a sign-in token there so you stay signed in. If you install the app, a copy is kept on your device so it works offline. None of this is used to track you.
How long we keep information
We keep your account information until you delete your account. When an account is deleted, its progress and reminder settings are deleted with it.
Your choices and rights
- Stop reminders with the unsubscribe link, or in your account settings.
- Get a copy of your progress from the Progress page (Make a backup).
- Delete your account and its synced progress from your account panel (Delete account). If that isn't available, or you'd like a correction, ask us with Send a message. We'll do it promptly and confirm when it's done.
Children
Ivrit Road isn't aimed at children. If you're under 16, please ask a parent or guardian before creating an account.
Changes to this policy
If we change this policy, we'll update the date at the top of this page. For significant changes affecting account holders, we'll let you know by email.