Privacy notice
In short: HSK 4 Study Desk has no accounts, no cookies, no analytics and no ads. Your study progress is kept only in your own browser. We never receive it, so we cannot see, sell or share it. This notice applies to everyone, wherever you live.
Who runs this site
HSK 4 Study Desk, at learn.crestviewbridge.net, is a free study tool run by Crestview Bridge (“we”). For anything about privacy, email adelami@crestviewbridge.net. We are the controller (in some laws, the “data fiduciary” or “personal information handler”) only for the limited technical data described under “What our hosting provider processes”.
What is stored on your device
To remember your flashcards and plan, the site saves the following in your browser’s local storage on the device you use. It stays there and is not sent to us or anyone else.
- Flashcard progress: which words you have started and when each is due again.
- Daily study log: minutes studied, reviews done, routine blocks ticked.
- Drill and reading scores, mock exam scores you enter, and sentences or essays you choose to save.
- Settings: your exam date, timer lengths, sound and speech speed, and whether you have seen this notice.
- Essay drafts in progress, kept in session storage and cleared when you close the tab.
- A copy of the site’s own files (pages, styles, word list), kept in your browser’s cache so the desk opens quickly and works offline. It contains none of your data.
Why, and why there is no consent banner: this storage is strictly necessary to provide the study features you ask for. Storage of that kind is exempt from cookie consent under the EU and UK ePrivacy rules and under Nigeria’s GAID 2025, and similar rules elsewhere. There are no advertising, analytics or tracking cookies, and no similar tracking technologies.
How long: until you delete it. Use Progress → Delete all my data on this device, or clear this site’s data in your browser settings. Data on one device never syncs to another. Use Export backup to move it yourself.
What our hosting provider processes
The site is delivered by Cloudflare, Inc. Like any website host, Cloudflare must receive basic technical data to send you the pages and protect the site from attacks: your IP address, browser type, the page requested and the time. We have not turned on visitor analytics or request logging, and we do not receive this data. Cloudflare processes it as our service provider for delivery and security only, and keeps it only as its own policies allow.
- Lawful basis: our legitimate interest in delivering a working, secure website (for example GDPR and UK GDPR Article 6(1)(f), and section 25 of the Nigeria Data Protection Act 2023).
- International transfers: Cloudflare’s network is global, so this technical data may be handled outside your country. Cloudflare protects such transfers under its data processing terms, which include standard contractual clauses. See Cloudflare’s privacy policy.
- No selling or sharing: we do not sell or share personal information for advertising, as those terms are used in California and other US state laws, and we make no automated decisions about you.
This notice covers learn.crestviewbridge.net only. The main crestviewbridge.net website is covered by Crestview Bridge’s own notices.
Features that use your browser
- Listen buttons use your browser’s built-in speech feature. Some browsers use their maker’s online voices, in which case the Chinese text being read is handled by that browser maker, not by us.
- System notifications are only shown if you allow them. Timers run on your device.
- Links to other sites, such as Mandarin Zone, open in a new tab and are covered by those sites’ own privacy notices.
Children
Learners of any age can use the desk. It collects no personal data from anyone, so it does not collect data from children either, and no parental consent is needed to use it.
Your rights
Depending on where you live, laws such as the EU and UK GDPR, the Nigeria Data Protection Act, China’s Personal Information Protection Law, Brazil’s LGPD, India’s DPDP Act, South Africa’s POPIA, Kenya’s Data Protection Act, Canada’s PIPEDA and US state privacy laws give you rights to know about, access, correct, delete and port your personal data, to restrict or object to processing, and to withdraw consent.
- For data on your device, you control it directly: export it with Export backup and erase it with Delete all my data on this device.
- For hosting data, or any question, email adelami@crestviewbridge.net. We will reply without undue delay and within 30 days, and help you reach Cloudflare where only they hold the data. We will never treat you differently for using your rights.
- You can also complain to the data protection authority where you live, for example the Nigeria Data Protection Commission, your EU supervisory authority or the UK ICO.
Security
The site is served only over HTTPS, loads no third-party scripts, fonts or trackers, and sends strict security headers (a content security policy, HSTS and anti-framing protection). If a personal data breach affecting you ever occurred, we would notify the relevant authorities within the deadlines the law sets, which is 72 hours in the EU, UK and Nigeria, and tell you without undue delay where it posed a high risk to you.
Changes
If we add any feature that collects personal data, such as accounts, sync or AI feedback, we will update this notice first and ask for your consent where the law requires it.
Last updated 29 October 2026.