私隱通知 / Privacy notice

1. 我們處理的資料 / Information we process

免費練習會記錄年級、科目、作答進度、提示使用及結果，並用瀏覽器 cookie 找回這次練習。建立帳戶時，我們處理家長電郵、帳戶及登入資料、孩子使用者名稱／顯示名稱、年級與家庭帳戶關聯。已登入的練習會保存進度、獎勵及報告資料，以便家長查看。

Free practice records the selected grade and subject, answer progress, hints and results, with a browser cookie to resume that attempt. Accounts use a parent email, account and sign-in details, learner username/display name, grade and family account relationship. Signed-in practice stores progress, rewards and reporting information for the parent view.

請由家長提供資料，勿在顯示名稱中加入孩子全名、學校、電話或地址。Phonics 入門只播放錄音，不錄製孩子聲音。

Parents should provide account information. Avoid putting a child's full name, school, phone number or address in a display name. The phonics starter plays recordings and does not record the child's voice.

2. 用途及服務供應商 / Purposes and service providers

資料用於提供帳戶及練習、顯示學習進度、處理付款、寄送驗證／登入／密碼重設電郵及回應支援查詢。Cloudflare 提供網站及資料儲存；Stripe 處理付款；Amazon SES 在美國東部（北維珍尼亞）處理收件地址、服務電郵內容及投遞／退信資料。MXroute 提供支援信箱及轉寄。服務電郵不追蹤開啟或連結點擊。選用 Google 登入時，我們接收登入所需的電郵及基本帳戶資料。供應商可能在香港或新加坡以外處理資料。

We use information to provide accounts and practice, show progress, process payments, send verification/access/password-reset emails and respond to support requests. Cloudflare provides hosting and storage; Stripe processes payments. Amazon SES sends service emails from its US East (N. Virginia) region and processes recipient addresses, message content and delivery or bounce information. MXroute hosts our support mailboxes and forwarding. Service emails do not use open or click tracking. If you choose Google sign-in, we receive the email and basic account information needed for sign-in. Providers may process information outside Hong Kong or Singapore.

信用卡資料在 Stripe 結帳頁輸入；OtterCub 的應用程式資料庫不儲存完整卡號。網站及服務供應商可能處理 IP 位址及技術記錄，以傳送內容、保護服務及排查錯誤。

Card details are entered on Stripe checkout; the OtterCub application database does not store full card numbers. Hosting and service providers may process IP addresses and technical logs to deliver content, protect the service and troubleshoot errors.

中英文默書工具 / Chinese and English dictation tools

默書輸入、字詞表名稱及朗讀設定會暫存於目前瀏覽器。登入後按下儲存，內容才會保存至你的帳戶，可在工具內刪除。選擇朗讀時，所選文字會傳送至 ElevenLabs 產生粵語、普通話或英文語音；請勿輸入個人資料。產生的語音以文字及語音設定的雜湊作快取索引，保存最多 30 天供重播；刪除字詞表不會立即刪除共用語音快取。字數額度按每份內容及帳戶資格計算，沒有每日製作次數額度。

The dictation draft, list title and reading settings are stored in this browser. Lists are saved privately to your account only when you choose Save, and can be deleted in the tool. Pronunciation sends the selected text to ElevenLabs to generate Cantonese, Mandarin or English audio; do not enter personal information. Audio is cached for up to 30 days under a hash of the text and voice settings. Deleting a list does not immediately remove shared audio caches. Word allowances apply per track and account tier; there is no daily generation quota.

按下「分享字詞表連結」會另存一份內容、名稱及朗讀設定的公開副本；持有連結的人均可查看。分享副本不包含帳戶資料、錯字記錄或家長備註，亦不會隨私人字詞表的修改或刪除而更新。請勿分享敏感資料。

Choosing Share list link creates a public snapshot of the content, title and reading settings. Anyone with the link can view it. The snapshot excludes account details, revision records and parent notes, and is independent of changes to or deletion of your private list. Do not share sensitive information.

英文默書亦使用相同的儲存方式及語音服務，產生英文朗讀。預先製作的常用粵語讀音可直接播放，毋須傳送你的字詞表。錯字溫習記錄包含語言、字詞、錯誤次數、是否需要重溫及家長備註，儲存在已登入的帳戶，並可自行刪除。刪除一份默書字詞表不會刪除跨字詞表使用的溫習記錄。

English dictation uses the same storage and speech service to produce English audio. Pre-generated common Cantonese recordings play without sending your list to the speech provider. Private revision records store the language, term, wrong count, revision status and parent note, and can be deleted. Deleting a dictation list does not delete revision records shared across lists.

提交工具意見時，你填寫的內容、選填的家長聯絡電郵、工具頁面、朗讀語言及隱藏單字設定，會透過服務電郵寄給 michelle@ottercub.com，用於閱讀及回應意見。字詞表內容、帳戶編號及溫習備註不會自動附上。意見內容不另存於應用程式資料庫；電郵副本保留在支援信箱。防止重複大量寄送的 IP 雜湊計數最長保留十分鐘。

Submitting tool feedback emails your message, optional parent contact email, tool page, pronunciation language and hidden-text setting to michelle@ottercub.com for review and replies. Dictation text, account IDs and revision notes are not attached automatically. Feedback contents are not separately stored in the application database; email copies remain in the support mailbox. Hashed-IP submission counters expire within ten minutes.

3. Cookies 與瀏覽器儲存 / Cookies and browser storage

登入、安全及練習 cookie 支援帳戶和練習續接；練習 cookie 的有效期為七天。瀏覽器亦會記住語言等介面設定。清除 cookie 或本機儲存可重設這些設定，亦可能使你登出或失去匿名練習的續接功能；清除瀏覽器資料並不會刪除伺服器上的帳戶記錄。

Sign-in, security and practice cookies support accounts and resuming practice. The practice cookie lasts seven days. Browser storage also remembers interface preferences such as language. Clearing cookies or local storage resets those preferences and may sign you out or prevent resuming an anonymous attempt; it does not delete server-side account records.

4. 推廣成效統計 / Campaign measurement

我們使用網站自身的每日彙總計數，了解到訪、體驗及建立帳戶等步驟。統計不包括孩子姓名、帳戶編號、答案、分數、IP 位址或完整網址。已知推廣活動的固定標籤可透過最長三十分鐘的第一方 cookie 保留。統計不會傳送至第三方廣告像素，並尊重瀏覽器的 Global Privacy Control 及 Do Not Track 訊號。超過九十天的每日彙總統計會在下次寫入統計時清除。

First-party daily aggregate counts help us understand visits, practice and account creation. Measurement excludes learner names, account identifiers, answers, scores, IP addresses and full URLs. Fixed labels for known campaigns may be kept in a first-party cookie for up to 30 minutes. These counts are not sent to third-party advertising pixels, and measurement respects browser Global Privacy Control and Do Not Track signals. Daily aggregate counts older than 90 days are removed on the next measurement write.

你可在下方關閉自選統計。此選擇透過本機 cookie 保留一年，並只適用於目前瀏覽器。

You can turn off optional measurement below. This choice is remembered in a first-party cookie for one year and applies to this browser.

英文學習摘要與跟進電郵 / English summaries and follow-up emails

完成英文練習後，家長可選擇提供電郵收取摘要，毋須建立帳戶。我們保存電郵、年級、任務、寄送記錄及同意／驗證狀態；摘要記錄包括分數、技能及提示使用數量，不含孩子姓名或答案文字。跟進提示及 OtterCub 優惠需另外選擇，並確認電郵後才會在第 2 天及第 7 天寄出。取消訂閱或建立帳戶會停止這個跟進序列。未確認的資料於 7 天驗證期限後由定時工作清除；已寄出的摘要內容 30 天後清除。已確認的電郵與同意／取消記錄保留至家長要求刪除，以尊重寄送選擇。

After English practice, a parent may request an emailed summary without creating an account. We store the parent email, grade, mission, delivery records and consent/verification status. Summary records include scores, skills and hint counts, without child names or typed answers. Learning tips and OtterCub offers require a separate choice and email confirmation; two follow-ups are sent on day 2 and day 7 after confirmation. Unsubscribing or creating an account stops this sequence. Scheduled processing removes unverified records after the seven-day verification window and sent summary content after 30 days. Verified email and consent/unsubscribe records remain until a parent requests deletion so we can respect delivery choices.

5. 保存資料與家長要求 / Retention and parent requests

帳戶及學習記錄不會因關閉瀏覽器或 cookie 到期而自動刪除。如需查閱、更正或要求刪除你或孩子的資料，請由帳戶電郵聯絡 hello@ottercub.com。我們可能需要確認你與帳戶的關係。部分交易及安全記錄可能需按適用要求保留；處理個別要求時會說明影響。請勿在電郵附上密碼、PIN 或不必要的孩子資料。

Account and learning records are not automatically deleted when the browser closes or a cookie expires. To request access, correction or deletion of your or your child's information, email hello@ottercub.com from the account email. We may need to verify your relationship to the account. Some transaction or security records may need to be retained under applicable requirements; the implications can be explained when handling the request. Do not include passwords, PINs or unnecessary child information.

森林城市及學習金幣 / Woodland city and learning coins

未登入的城市使用一個隨機、僅供網站讀取的瀏覽器 Cookie（90 天）連結至伺服器上的城市格局、物品和已賺取的金幣。清除或遺失這個 Cookie 後，未儲存至帳戶的城市不能在其他裝置找回。登入孩子檔案後，城市與餘下金幣可一次轉存至該帳戶。已登入的城市物品及操作記錄會連結至孩子檔案，用以保存建造進度、核對扣款及避免重複獎勵；城市不會自動公開。請勿在城市名稱輸入孩子的全名或其他個人資料。

Guest cities use a random, HttpOnly browser cookie lasting 90 days to access a server-stored layout, inventory and earned coin balance. Losing that cookie prevents recovery of an unsaved guest city on another device. Signing into a learner profile can transfer the city and remaining coins to that account once. Account city items and action records are linked to the learner to save progress, verify spending and prevent duplicate rewards. Cities are not automatically public. Do not include a child's full name or personal information in city names.

6. 查詢與更新 / Questions and updates

如有私隱或資料用途疑問，請查看 聯絡資料。本通知會隨服務更新，最新日期見頁首。

For privacy or data-use questions, see our contact information. This notice may change with the service; the current update date appears above.