Accounts store name, email, password hash, learning progress, notes and bookmarks. Passwords are stored using PHP password hashing. We do not intentionally sell personal information. Hosting/server logs may contain standard technical data such as IP address and user agent.