Privacy Policy
Last updated: 18 October 2026
This Policy explains what personal data Dsetopia 星境 collects, why we hold it, how long we keep it, and what you can ask us to do with it. Dsetopia is operated by a sole trader based in the United Kingdom, who is responsible for your personal data (the data controller).
1. What we collect
Account: the name, email address and profile picture Google returns when you sign in, plus the sign-in tokens Google issues so we can keep you signed in. Practice: the mocks and drills you generate, your answers, your timings and your scores. If you're signed in and use 十二篇範文: which texts you opened, the last paragraph you reached in each, and your self-test scores. We also derive per-question difficulty statistics from everyone’s attempts; those are anonymous aggregates and cannot identify you. Product analytics: which pages you open and what you do on the Service (for example, generating a mock or downloading a PDF), recorded with your user id when you are signed in. When you are not signed in, your page visits are only counted: no id is recorded, and the time is rounded to the hour. Security: your IP address, in a short-lived rate-limit record. Payment: your Stripe customer id and your plan status — your card details go straight to Stripe and never reach our servers. Waitlist: your email address and the plan you asked about, if you ask to be told when a plan opens. PDF exports you generate are stored for you, with your account email printed in the footer to discourage sharing them on.
2. Cookies and analytics
We set functional cookies: one to keep you signed in; small preference cookies that remember your language, your light/dark theme, and the text size and typeface you choose for question text; and one that remembers your cookie choice. For 十二篇範文, your browser also remembers your text size, where you stopped in each text, and the language and speed you chose for the read-aloud. These stay on your device. If you're signed in, where you stopped and the read-aloud voices you pick are also saved to your account. One more cookie is optional and set only if you accept it: an attribution cookie that, for 30 days, records which campaign link or website brought you here (the standard campaign labels and the referring site’s name, no identifier), so we can see which posts lead people to Dsetopia; if you then create an account, that record is copied once onto your account. If you decline, it is never set, and while you are signed out nothing about how you arrived is recorded. You can change your choice at any time with Cookie settings, at the foot of every page and below this section. We set no advertising cookies and no third-party tracking cookies. We also count page visits ourselves, without a cookie. When you are not signed in, each visit is counted with no identifier of any kind and its time rounded to the hour; the first page of a visit also notes the kind of site that sent you (a search engine, Instagram and so on), never its address. Our hosting provider’s page-view analytics (Vercel Analytics) is cookieless too and does not follow you to other sites. If you decline, both stop: we count nothing while you are signed out, and Vercel Analytics is switched off. When you are signed in, the pages you open (and the kind of site that sent you, on the first page of a visit) are recorded with your account as part of the Service, under our legitimate interest (section 3), whatever you choose here; you can ask us at privacy@dsetopia.com to stop recording which pages you open and to delete those already recorded. You can clear these cookies in your browser at any time; clearing them signs you out.
3. Why we hold it, and on what basis
Each use below has a lawful basis under UK data protection law. To provide the Service you signed up for (performing our contract with you): signing you in and keeping you signed in; generating, marking and storing your mocks and drills, and showing you your results and topic analytics; taking payment and giving you the plan you bought; and sending service emails, such as a receipt or a notice about your plan. For our legitimate interest in running a reliable, fair and improving service, which we have weighed against your interests: finding and fixing errors, and stopping abuse of the Service; calibrating how hard each question is, from the anonymous aggregate of how everyone answered it; product analytics, including the pages you open while signed in (section 2 says how to ask us to stop); and looking at how students do on our mocks, including individual attempts, so that we can improve the questions and help you when you contact us (no one outside Dsetopia can do this). With your consent: occasional study reminders by email, and telling you when a plan opens if you joined its waitlist. You can withdraw consent at any time on your account page or by emailing privacy@dsetopia.com, and you can turn other service emails off on your account page too; purchase confirmations always send, because they are your record of what you bought. To meet legal obligations: keeping payment records for as long as tax and accounting law requires. We do not sell your personal data, and we do not use it to advertise to you.
4. Who processes it
A small number of providers run parts of the Service for us, each under an agreement that requires them to protect your data: Google (sign-in), Stripe (payments), Vercel (hosting and the cookieless page-view analytics), Neon (database), Cloudflare (PDF storage, DNS and email routing) and Sentry (error monitoring, with personal data switched off and web addresses scrubbed). These providers store data outside Hong Kong, and may store it outside the United Kingdom. We share your data with no one else, except where the law requires it.
5. How long we keep it
Rate-limit records: 7 days, then pruned. Product analytics events (the pages opened and the actions taken): 180 days. Anonymous daily totals made from them, which hold no identifier: 3 years. Your attempts, results and drill history: for as long as your account exists. PDF exports: cached for up to 90 days, then regenerated on demand when you next ask for one. If you ask us to delete your account, everything above that is tied to it is deleted within 30 days — except records Stripe must keep for payment and legal reasons, and anonymous aggregate statistics that can no longer identify anyone.
6. Your rights
You may ask what personal data we hold about you, ask for a copy of it, ask us to correct it, and ask us to delete it. You may also object to how we use it, or ask us to restrict it. These rights come from UK data protection law (the UK GDPR) and, if you live in Hong Kong, also from the Personal Data (Privacy) Ordinance. You can delete your account and its data yourself from your account page. Otherwise email privacy@dsetopia.com from your account address, and we will reply within one month. Making a request costs you nothing. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO) or, in Hong Kong, to the Privacy Commissioner for Personal Data.
7. Under 18
Many of the people who use Dsetopia are school students. If you are under 18, ask a parent or guardian for permission before you create an account, and again before you pay for anything. We do not knowingly collect anything beyond what section 1 lists, from anyone, at any age. A parent or guardian can email privacy@dsetopia.com to ask us to delete a child’s account and data, and we will handle it the same way as a request from the account holder.
8. Contact
For any privacy question or request, email privacy@dsetopia.com. For anything else, email support@dsetopia.com. We may update this Policy; if we change it in a way that matters, the new version is posted here with a new date.