Last updated August 6, 2026.
Browsing Passage without an account collects nothing beyond optional, consent-gated analytics. Creating an account collects your name, email, and a securely hashed password, plus your own learning progress. We don't sell data, and analytics only run if you say yes to the cookie banner.
If you create an account: your name and email address, and your password — stored as a secure hash, never in plain text, so we never see or can recover the original password. We also store which languages you've started and your exercise/quiz results, so your progress is there when you come back.
If you don't create an account: we don't store anything tied to you personally. Standard infrastructure logs (the kind any web host keeps — request timestamps, IP addresses, for security and debugging) exist briefly at the hosting level but aren't something we access or build any profile from.
Passage uses Google Analytics to understand traffic in general terms (which pages get visited, roughly how much traffic there is) — with IP addresses anonymized. It does not load at all until you click "Accept" on the cookie banner; if you click "Decline," or never make a choice, nothing analytics-related runs. Your choice is stored locally in your browser, not shared with anyone.
Passage runs on Vercel (hosting) and Neon (database), which process data on our behalf to run the site — they don't use it for their own purposes. If you've consented to analytics, Google Analytics processes that traffic data under its own terms. We don't sell or share personal data with anyone else.
You can change your cookie choice anytime by clearing your browser's local storage for this site. To request a copy of your data, ask us to correct something, or have your account and its data deleted, email ab.derfoufi@gmail.com.
If this policy changes in a meaningful way, we'll update the date at the top of this page.