Privacy Policy

This is an English translation for convenience; if it differs from the 中文版, the Chinese version prevails.

Version 2026-09-04 (beta). This policy explains how “Medical Board Review · Essentials” (the site) collects, processes and uses your personal data, as notified under Article 8 of Taiwan's Personal Data Protection Act.

1. No sign-in needed

You can use all teaching material and question banks without registering. When you are not signed in, the site collects no personal data; your reading and answering progress stays in your browser (localStorage), is never uploaded, and is removed when you clear your browser data.

2. What we collect after sign-in

If you choose to sign in with Google (or an email link), the site collects:

① Account data: email address and your Google public profile (name, avatar). The site does not access your Gmail, Drive or other Google services.
② Study records: answer records (question ID, chosen option, correct or not, subject, time), streaks and review schedules.
③ Community content: question discussions, Cheer Wall posts and profile details (nickname, bio) that you choose to publish.

3. Purposes and use

Purposes: member identity management, cross-device progress sync, personal study statistics, and community features. Statistics shown to other users are anonymous aggregates only (such as each question's site-wide accuracy, shown only once at least 5 people have answered it); your individual answers are never disclosed.

4. Period, location and recipients

Period: until you delete your account or the site ends the service. Location: servers of our processors (the database is in Tokyo, Japan). Recipients: only the site and these processors — Supabase Inc. (database and sign-in), Cloudflare Inc. (hosting), Google LLC (OAuth sign-in; it also provides the course-video player, which loads from the no-cookie domain youtube-nocookie.com only after you press play, with thumbnails from i.ytimg.com, at which point Google's privacy policy applies). The site never sells or provides your personal data to any third party for marketing, and it carries no ads or trackers.

5. Cookies and local storage

The site uses browser local storage (localStorage) for sign-in credentials, study progress and preferences; it uses no third-party marketing cookies.

6. Security

The whole site is served over HTTPS; the database uses Row Level Security so each user can only access their own records; server keys are never stored in the front end.

7. Your rights

Under Article 3 of the Personal Data Protection Act you may at any time: request access or review, request a copy, request supplements or corrections, request that collection, processing or use stop, and request deletion. Email ottermedboard@gmail.com and we will handle it within a reasonable period; deleting your account deletes the account data and all study records together. If you choose not to provide personal data (that is, not to sign in), you can still use all teaching material — only cross-device sync and community features are unavailable.

8. Changes

Material changes to this policy will be announced on the home page.

Contact: ottermedboard@gmail.com