Accounts

There is no open signup. Accounts are created by the site owner for reading-training study participants and family members. An account consists of a username, an optional email address, and a password. Passwords are never stored in plain text — they are hashed using Django's standard password hasher before they ever touch the database.

Cookies

The site itself sets only two cookies, both of which are needed for the site to function: a session cookie (which keeps you logged in and remembers small preferences like your selected lottery game) and a CSRF cookie (which protects forms against cross-site forgery). Cloudflare, which routes traffic to the site, may set its own technical cookies for security purposes. There are no advertising cookies, no analytics cookies, and no third-party trackers of any kind.

The lottery page

When you use the lottery number generator, your session stores which game you selected and a reference to your last draw, so the page can show your numbers again when you come back. The random numbers themselves come from the Australian National University's quantum random number generator API. No personal data is sent to that service — the site only asks it for random numbers.

Data from logged-in features

If you are an enrolled reading-training participant, the site records your answers to comprehension questions and your reading-time measurements. This is the point of the program — the data is used to adjust your training and to compare training approaches in aggregate.

The sleep tracker is restricted to designated family members and stores a shared daily sleep log. Other account holders cannot see it.

Hosting and server logs

The site is hosted on Heroku in the United States and is proxied through Cloudflare, which sees visitor IP addresses as part of routing traffic to us. Ordinary server logs (requests, timestamps, errors) are kept for operating and debugging the site.

What we do not do

We do not sell personal data. We do not run third-party analytics or advertising on the site today. If that ever changes, this policy will be updated first.

Links to other sites

Pages on this site may contain outbound links, including affiliate links to lottery-related services. Clicking one takes you to a third-party site that is governed by its own privacy policy, not this one. We encourage you to read the privacy policy of any site you visit.

Security

All traffic to the site is served over HTTPS. Passwords are stored hashed, and access to logged-in features is restricted by role — participants cannot see each other's data, and the family sleep log is limited to family accounts.

Children

The site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

Your choices and deletion

If you want your account or its data deleted, or you have any question about how your information is handled, email [email protected] and we will sort it out.

Changes to this policy

We may update this policy from time to time. The effective date at the top will change whenever we do. Meaningful changes will be reflected here before they take effect.

Contact

Questions about privacy on this site: [email protected].