Privacy Policy

Who we are and what this covers

Virtuous English Academy ("VEA", "we", "us") runs the free English-learning website at virtuousenglishacademy.com. This policy covers that website and every page on it.

It explains what data we hold, why we hold it, who else can see it, and what you can make us do about it. It is written to meet the UK GDPR, the EU GDPR, the CCPA/CPRA, and the disclosure requirements of the Google AdSense programme.

If anything here is unclear, ask us at virtuousenglish@virtuousenglishacademy.com — we would rather explain it than have you guess.

What we collect

Your data sits in one of two layers, and which one depends entirely on whether you have chosen to create an account.

If you use VEA without an account

Your progress, quiz states, saved preferences and study timers are written to your own browser's localStorage. That data stays on your device. We cannot read it, and it is never transmitted to us. The one exception is the optional Word Trainer reminder, which you switch on yourself and which is described below.

You can erase all of it at any moment by clearing site data in your browser. You do not need to ask us, and nothing is kept on our side to delete.

If you create a free account

Signing in lets your progress follow you between devices, and it is what a certificate is issued against. Creating an account asks for four details on one screen, once. We store, against your account:

• Your email address, handled by Google Firebase Authentication.
• Your given name and family name — the name a certificate would be issued in, which is why we ask for a real one rather than a nickname.
• Your nationality — printed on a certificate, as it is on any language certificate. “Prefer not to say” is on the list and is a complete answer.
• Your year of birth — a year, never a full date. It does two jobs: telling two candidates with the same name apart on an exam record, and letting us apply the under-13 rule below. An exact date of birth is not asked for and the form would not accept one.
• Whether your email is verified, and the date and policy version recorded when you created the account.
• Course progress, streak count, XP, badges and weekly study seconds.
• Flashcards and vocabulary you choose to save, and notes you write in the dashboard.
• Placement-test results and any certificate you generate.
• Whether you ticked the optional marketing-email box when you signed up, and, if we have sent you the Word Trainer’s Monday recap or a reminder about an unfinished payment, the day the last one was sent.
• If we asked you for a review: the day we asked, and the review you sent us, if you sent one (see Asking for your review).

We never see your card. Almost everything on VEA is free; the one exception is the Certified English Placement Exam. If you buy it, the payment is taken by Dodo Payments on its own checkout page. Your card number, expiry and security code are entered there, not here, and are never transmitted to us or stored on our servers. What comes back to us is a confirmation that an order was paid, an order reference, and the country the provider used to work out tax.

We do not ask for your address, phone number, exact date of birth or any government identifier. A year of birth is a year: it is not a date, and there is no way to derive one from it.

If you write to us

Messages sent through our contact page reach us by email and include the name, email address and message you typed. We keep them only as long as we need to answer you.

The Word Trainer — your words, your streak and the weekly league

The Word Trainer works without an account, and then everything it knows about you stays in your browser. If you sign in, a copy of your progress is also kept with your account, so it follows you between devices: which words you have met, when each one is due, how many questions you answered on each day, and the points those answers earned.

The weekly league is public, and you are on it when you study signed in

The league is a weekly board of learners and the points they earned in the Word Trainer. Anyone can see it, signed in or not: it is shown on our home page and inside the trainer.

If you use the Word Trainer while signed in and earn points, you are put on that week’s board automatically. A row on the board shows four things and nothing else: a name — your first name, unless you change it — your level, your points for the week and the length of your streak. It never shows your email address, your family name or your account’s identifier.

You are not listed if you use the trainer without an account, or if you have switched leaderboards off in your dashboard settings.

You can change the name the board shows, or hide yourself from it, at any time from the league screen in the trainer. Hiding takes your row down. Deleting your account removes your league rows and your saved words as well.

You can cheer another learner on the board, and other learners can cheer you. A cheer has no words in it. It stores the week and the two places on the board, and nothing else. You can cheer a learner once a week. Anyone can see how many cheers a row has. Hiding yourself or deleting your account removes the cheers you sent and the ones you received.

If you study signed in, each session also saves a record of your answers when it ends. The record holds which word it was, and whether you were right or wrong. It also holds how long since you last saw the word, how long you took and the kind of question. We use it to tune when words come back. It carries a one-way code instead of your account id. It holds no name, no email address and no words you typed. Nobody else can read it, and deleting your account deletes it.

The Word Trainer — the optional reminder

The Word Trainer can send you one reminder a day. It is off until you switch it on, with the button “Remind me on this phone” (or “in this browser”), and your browser asks you first. You do not need an account.

What we keep to send it

When you switch it on, our server keeps four things about your browser and nothing else: its push address — a web address your browser gives us so that a message can reach it — the time you chose, your time zone and the last day you practised. It holds no name, no email address, no account identifier and no word you have learnt. We use the push address only to send this reminder, and we do not write it to our logs.

How a reminder is sent

At the time you chose, on a day you have not practised yet, our server sends an empty message to your browser maker’s push service: Google for Chrome, Mozilla for Firefox, Apple for Safari and Microsoft for Edge. That service sees that a message was sent to your browser, and nothing about your words, because the message has no content. The words you read, such as “12 words are ready.”, are written on your own device.

We send at most one reminder a day. After three reminders in a row that you do not open, we stop until you open the trainer yourself. If the trainer is not opened in that browser for 90 days, we delete what we keep for the reminder.

Your browser keeps two small entries

In your browser the reminder keeps one entry in localStorage, called vea_wt_push, and one small IndexedDB database, called vea-wt. They hold your time, your time zone and the numbers the message is written from. They are listed on the cookie policy.

How to switch it off

Press “Turn off the reminder” on the reminder screen in the trainer. That deletes what we keep. You can also block notifications for this site in your browser’s settings, or clear this site’s data: your browser then drops the push address, and we delete our copy the next time the push service tells us the address is gone.

The Word Trainer — the Monday recap e-mail

Once a week, on Monday, we can send you one short e-mail about your week in the Word Trainer. You get it only if you have an account and agreed to e-mails from us: the optional e-mail box when you signed up, or the same box in your profile. Without that agreement we do not send it.

Who gets it

A member who agreed to e-mails and who practised in the Word Trainer on at least one day in the last 90 days (a day counts once five answers are given or a session is finished). We send at most one recap in any six days.

What it contains

Your first name, if you gave one, and numbers we read from your own trainer records: last week’s answers, days kept and points, your best day, your streak, your known and growing words, and how many words are due today. It holds no advertisement, no offer and no information about anybody else. If you did not practise last week, it shows no figures for last week and only says what is waiting.

How it is sent

On Monday morning (UTC) our server reads your trainer records, builds the message and hands it to Brevo, our e-mail provider, with your address and first name. On your account record we keep one more thing: the day the last recap was sent, so that we do not send two in a week. We do not write your address or your name to our logs.

How to stop it

Every recap has a “Stop these e-mails” link, and your mail app may show its own Unsubscribe button. Opening the link only shows a page; pressing the button on that page stops the e-mails. That switches off the recap and every other optional e-mail from us. E-mails about your account, such as a password reset or an exam result, are not optional and still arrive. You can also write to virtuousenglish@virtuousenglishacademy.com and we will do it by hand.

Asking for your review

We may send you one e-mail asking what you think of the certified exam, the Word Trainer or our lessons. We send it to members, also if you did not tick the e-mail box when you signed up. We do not send it if you pressed “Stop these e-mails” in one of our e-mails. It goes to the address of your account. We never use the address you typed on the exam’s first screen for it.

Our reason (legal basis) is our legitimate interest in learning what members think of what they use. You can say no at any time with the stop link in the e-mail, and then we send you no more optional e-mails.

Who gets it

A member who took the certified exam, met at least 10 words in the Word Trainer on at least 2 days, or studied on the site on at least 5 different days. Word Trainer and lesson learners must have been active in the last 90 days. We ask everybody in these groups, whatever their result or their experience. We send at most one review e-mail in six months, and never again for something you have already reviewed.

What we keep

The stars in the e-mail open a page on our site. Opening it saves nothing. When you press the button, we keep your stars, the ready answers you ticked, any words you wrote, and whether you let us show your review. We keep it with your account, and only our own server can read it. If you let us show your review, we also keep your first name, because that is the name we would show beside it. That box is empty until you tick it, and we show a review on the site only if its writer ticked it.

On your account record we also keep the day we asked. The e-mail is sent through Brevo, our e-mail provider, with your address and first name. When you send or change a review, Brevo also delivers a copy of it to our own inbox, with your first name, so that our director can read it. We do not write your address, your name or your review to our logs.

Trustpilot

After you answer, the page offers a link to Trustpilot, a separate review website. We show that link to everybody who answers, whatever their stars. We send Trustpilot nothing about you. If you write a review there, you write it yourself, under Trustpilot’s own privacy policy.

How to change it or stop it

You can change your answer or remove it at any time with the same link. If you delete your account, your review is deleted within a day. Every review e-mail has a “Stop these e-mails” link, which stops this and every other optional e-mail from us.

The certified exam — payment, recordings and AI marking

The details you give before you start

Before the first question the exam asks for five things, and it asks for them because a certificate names a person. You give them once, on a screen where the clock is not yet running, and you can see exactly how your name will be printed before you confirm it.

• Your given name and family name — printed on the certificate, which is the whole reason we ask. They cannot be changed after the exam is scored, so please check them on that screen.
• An email address — where we send your result and your certificate link. It is your choice and does not have to be the address you signed in with.
• Your nationality — printed on the certificate, as it is on any language certificate. “Prefer not to say” is on the list and is a complete answer.
• Your year of birth — a year, never a full date. It does the job a date of birth does on an exam record, which is telling two candidates with the same name apart, without putting an exact date of birth on a page anyone with the link can read. We do not ask for one and the exam would not accept one.

Your name, nationality and year of birth appear on your certificate, and a certificate page is public to anyone who has its link — that is what makes it shareable and verifiable. Nothing else from your account appears there. If you delete your account, your certificates go with it.

What sitting the exam stores

• Your answers to every question, and how long each one took.
• The text of your writing tasks, including the draft as it autosaves.
• Audio recordings of your spoken answers — see below.
• Proctoring events: how many times the exam window lost focus, left full screen, or refused a copy or paste. We record that these happened and when; we do not record what you switched to, and we cannot see your screen, your camera or any other application.
• The result: your band per skill, the marker's written feedback, and the certificate if one is issued.

Your voice recordings

The speaking section asks you to record three short spoken answers — two open questions and one sentence read aloud. Your microphone is active only while you are recording, you can listen back before you submit, and you can skip the section; nothing is marked from it either way.

• Why we hold them: to keep them with your attempt, and as evidence if an attempt is flagged for review. Nothing marks them at present. Nothing else. The legal basis is performance of the contract you entered when you bought the exam.
• Where they live: a private Google Cloud Storage bucket that no browser can read — only our server-side code can reach it.
• How long: 12 months, then deleted. You can ask us to delete them sooner at any time, and we will, unless the attempt is under active review.
• What we never do: publish them, sell them, use them to advertise, use them to identify you biometrically, or use them to train anybody's model.

Writing and speaking responses

Your writing and speaking responses stay with your exam attempt in our Google Cloud services. They are not sent to an external AI marker or speech-recognition provider.

• What is stored: the task prompt, what you wrote or recorded, and a few facts about how you worked, such as timing and revisions.
• What the detailed result uses: grammar, vocabulary, reading and listening answers scored on our servers.
• Training: we do not use your responses to train a model.

The result email

When your exam is scored we email the result to the address you gave on that first screen: your level, your score and its margin, your bands by skill, and a link to your certificate if one was issued. It is sent once, by our transactional email provider, and it is not marketing — there is no list to join and nothing else is sent to that address. If the name on the certificate is wrong, replying to that email is the fastest way to reach us.

A reminder about an unfinished payment

If you open the checkout but do not finish paying, we send you one reminder about two hours later, with a link back to your result. We do this only if you agreed to e-mails from us, or you ticked the reminder box on the payment screen. That box is empty until you tick it. We send a reminder at most once in 14 days, and never if you have paid. It goes through Brevo, our e-mail provider, with your address and first name. On your account record we keep the day it was sent, and on your order we keep that you ticked the box. Every reminder has a link to stop these e-mails.

Payment data

The sale is handled by Dodo Payments as merchant of record (their privacy policy). That company, not VEA, is the seller on your bank statement and the party that handles your card data, the tax and any dispute. We receive an order reference, the amount, the currency and the country used to work out tax, and we store those against your account so we know the exam is unlocked. We do not receive, and cannot ask for, your card number.

Word Trainer Plus — the subscription

What we store

• Whether your account has Plus, which plan it is (monthly or yearly), its status and the date it renews or ends.
• The subscription and customer references our payment provider gives us, so that a renewal, a cancellation or a refund reaches the right account.
• If you start the free week: the day it started and the day it ends, so that each account has it once.

The subscription is sold by Dodo Payments as merchant of record (their privacy policy). Your card details go to them and never reach us. The legal basis for these records is performance of the contract you entered when you subscribed. We keep them while you have an account, and records of a sale for as long as the law requires.

Advertising — how ads on this site work

Journey by Mediavine. The advertising on this site is served by Journey, the advertising programme of Mediavine, Inc. (United States). Its script is in the page code of the homepage, eligible lesson, grammar, vocabulary, story and blog pages, and the privacy policy page, where Mediavine’s script adds its own advertising notice, and it runs for every visitor as soon as the page opens. Mediavine chooses where on a page an ad sits and how many a page shows, within the ad density we set. In the EEA, the UK and Switzerland, Mediavine’s own consent window asks for your choice about advertising cookies and personalised ads. Tests, the certified exam, games, account screens and the other policy pages carry no advertising.

Whenever its script loads, Mediavine receives your IP address and the page you are on. Within the choices you make in its consent window, Mediavine and its advertising partners use cookies, pixels and similar technology to choose, show, measure and protect ads, including ads based on your visits to other sites. Mediavine handles that data under its own policies, set out in its Legal & Privacy Center, and the notice its script adds to our privacy policy page lists what it collects. We receive only aggregate reports, never who saw or clicked an ad.

Yandex Advertising Network showed advertising on eligible lesson pages to visitors outside the EEA, the UK and Switzerland from 30 September to 5 November 2026, and has been switched off. No Yandex script is loaded any more. Cookies it set in that time are its own, under its privacy policy, and you can switch off personalised ads from Yandex in the Yandex ad settings.

Infolinks (publisher ID 3448116) ran on editorial pages from 24 to 28 September 2026 and has been switched off. No Infolinks script is loaded any more.

Affiliate link: Preply. Most lesson, exercise, story and blog pages end with one card that links to online English tutors on Preply. It is an affiliate link through the Impact partner network: if you book a lesson, Preply may pay us a commission. The card is marked as an affiliate link on the page, and it never changes what a lesson teaches. The sign-in page shows it beside the form. Tests, the exam, games, other account screens and policy pages do not carry it.

The card is a plain link. It loads no script and sets no cookie on this site, and we send no personal data with it. When you click it, you go to Preply through Impact’s tracking address (preply.sjv.io); Preply and Impact may set their own cookies there to record that the visit came from us, under their own privacy policies.

Google AdSense is no longer used. It was paused on 24 September 2026, and on 8 November 2026 its last trace, an ownership-verification meta on the homepage, was removed: Journey by Mediavine is the site's only display advertising. No AdSense script or tag is on the site.

Advertising is limited to the homepage, eligible lesson, grammar, vocabulary, story and blog pages, and the privacy policy page, where Mediavine’s script adds its own advertising notice. Tests, games, account screens, the lesson directory, the certified exam and the other policy pages stay ad-free.

The advertising disclosures we make

• Third-party vendors — today Mediavine and its advertising partners — may use cookies or similar technology to select, deliver, measure and protect advertising.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet.
• You can opt out of personalised advertising by visiting Google Ads Settings.
• You can opt out of a third-party vendor's use of cookies for personalised advertising at the Network Advertising Initiative, aboutads.info/choices, or — in Europe — at youronlinechoices.eu.

What we do not do

We do not build our own advertising profiles, run cross-site behavioural tracking of our own, or sell your personal information to data brokers. Advertising data is processed by the advertising providers under their own policies, not passed to us as a list of people — we receive aggregate reporting, never the identity of who saw or clicked an ad.

If you are in the EEA, the UK or Switzerland

Consent Mode defaults advertising and analytics storage to denied in these regions. Journey advertising loads here too, and Mediavine’s own consent window asks for your choice about advertising cookies and personalised ads. Our own choice covers optional analytics only; you can revisit it from the "Privacy settings" link in the site footer.

Everywhere else

Outside these regions optional analytics runs by default, and so does the Journey advertising described above. To turn analytics off, choose "Decline" under the "Privacy settings" link in the site footer. That choice does not remove Journey advertising; to limit personalised ads, use the opt-outs listed above. The site decides which rules apply from your device's time zone, and asks first whenever that time zone could belong to one of these regions or cannot be read.

Grow by Mediavine — switched off

Grow by Mediavine, a reader tool for saving and sharing pages that also counted visits, was loaded for visitors outside the EEA, the UK and Switzerland from 9 October to 8 November 2026 and has been switched off. While it ran, Mediavine received those visitors' IP address and the page they were on, and Grow kept a growme_version cookie and localStorage entries whose names begin with grow. Those entries stay in a browser until you clear its site data. Mediavine handles that data under its own policies, set out in its Legal & Privacy Center.

Analytics

We use Google Analytics 4 (measurement ID G-56N53QZVQH) to understand which lessons people actually finish, which pages are broken, and where learners give up. It is the only analytics tool we run ourselves; Mediavine’s ad script, described above, measures its own ads.

We record page views plus a small number of named events: completing a placement test, saving a flashcard, and creating an account. These are counted, not tied to a name — we use them to decide what to build next, and for nothing else.

IP addresses are anonymised by Google Analytics 4 by default. We have not enabled Google Signals, advertising features or cross-device tracking in our Analytics property.

Third parties we actually use

This is the complete list. Every one of these is a service the site genuinely loads — if a name is not here, we are not sending your data to it.

Why we are allowed to hold this (legal basis)

• Contract — account data and essential account, security, exam and service-update email exist because you asked us to provide a membership and save your progress.
• Consent — advertising and analytics cookies in the EEA/UK, and marketing email anywhere. You can withdraw consent at any time without losing access to any lesson.
• Legitimate interests — keeping the service secure, preventing abuse, fixing what is broken, and asking members once in a while what they think of it (see Asking for your review).

How long we keep things

• Local, guest-mode data — until you clear your browser. We never see it.
• Account data — for as long as the account exists, then deleted on request.
• Contact messages — deleted once the conversation is finished.
• The Word Trainer reminder — until you switch it off, or the push service tells us your browser’s address has expired. After three reminders in a row that you do not open it pauses, and stays paused until you open the trainer again. If the trainer is not opened in that browser for 90 days, we delete the record.
• The Word Trainer’s record of your answers — kept with your account, and deleted when you delete the account.
• The Word Trainer’s Monday recap — only the day the last one was sent, kept with your account and deleted when you delete the account. We keep no copy of the e-mail. Brevo keeps its own record of delivery, under its policy.
• A review you sent us — until you remove it with the link in the e-mail, or until you delete your account; it is then deleted within a day.
• Analytics — retained on Google's default schedule for a GA4 property.
• Exam voice recordings — 12 months, or sooner if you ask.
• Exam scripts, marks and proctoring events — kept with the attempt record, because a certificate has to remain checkable for as long as it is shown to anyone.
• Order records — kept as long as tax and accounting law requires, which is longer than we would otherwise choose and is not ours to shorten.

Security

Account data lives in Google Firestore behind server-enforced security rules: each account can read and write only its own records, and those rules are enforced by Google's servers rather than by anything running in your browser. The whole site is served over HTTPS with HSTS.

No system is perfect. If you believe you have found a security problem, please write to us before disclosing it publicly and we will fix it as fast as we can.

Children

VEA is a general-audience education site and is not directed at children under 13. We do not knowingly collect personal information from a child under 13.

Since 2026-09-08 that is checked rather than assumed: creating an account asks for a year of birth, and a year that puts you under 13 is refused at that point — before any account exists. Nothing else about the site changes for you, because none of it needs an account.

Teachers using our material with a class should have pupils work in guest mode, which stores nothing off the device and requires no account at all. Every lesson, story, quiz and grammar page works fully without signing in.

If you are a parent or guardian and believe a child has created an account here, write to us at virtuousenglish@virtuousenglishacademy.com and we will delete it.

International transfers

Our hosting, authentication and database are provided by Google and may process data on servers outside your country, including in the United States. Google relies on the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework for those transfers.

Your rights

Wherever you live, you can ask us to:

• Show you a copy of the account data we hold about you.
• Correct anything that is wrong.
• Delete your account and everything attached to it.
• Stop marketing email, at any time, with one click.
• Restrict or object to a particular use of your data.

Deletion you do not need to ask for. Delete your account removes your profile, progress, saved words, notes and certificates immediately, from your own browser, with no request to us and no waiting period. That page also lists the two things which cannot vanish in the same instant, and why.

Under the GDPR you also have the right to data portability and the right to complain to your national data-protection authority. Under the CCPA/CPRA you have the right to know, delete, correct, and to opt out of "sale" or "sharing" — we do not sell or share personal information as those laws define it, and you will never be treated differently for exercising any of these rights.

To make a request, email virtuousenglish@virtuousenglishacademy.com from the address on the account. We answer within 30 days.

Changes to this policy

If we change how we handle your data in a way that matters, we will update the date at the top of this page and, for anything significant, say so on the site itself. Continuing to use VEA after a change means you accept the updated policy.