DreamArcade · datoefl.com
Privacy
Last updated 28 September 2026
This describes what the site actually does, checked against its own code. Where something stays on your device, it says so — that is usually the more useful fact.
Practice on your device
- Browser-only speaking practice. Some activities use your browser’s speech recognition. Your browser vendor may process that audio under its own policies. This is separate from optional automated assessment, which sends recordings to DATOEFL and the assessment providers described below.
- Progress, when you are not signed in. Scores, streaks and cleared levels live in your browser’s local storage. Clearing site data erases them, and we cannot recover them.
Automated Writing and Speaking assessment
When you request Writing assessment, DATOEFL processes your submitted response and sends it with the task and scoring instructions to OpenAI. Speaking assessment records your response only after you consent and prepare the microphone. Your original timed response is then sent to DATOEFL for temporary processing, to OpenAI for transcription and assessment, and, for Listen & Repeat and Take an Interview, to Microsoft Azure Speech in Korea Central for pronunciation and delivery analysis. Listen & Repeat includes the reference wording; Interview delivery analysis uses your recording without a reference script.
DATOEFL does not permanently retain raw assessment recordings. They are used in memory for the assessment request and released after success, failure or cancellation; recordings are not added to our database or media library. This does not promise that every external provider immediately deletes all data. Written responses, transcripts, scores, feedback, supporting evidence and task, rubric and model versions may remain in your private assessment history for up to 12 months. Expiry of a Practice Pass does not remove your ability to read reports still within that retention period. Reports stop being readable after 12 months; a daily cleanup removes expired records from the active database. Restricted recovery backups may retain an older snapshot until their backup retention period ends.
You must give explicit Speaking-assessment consent before your first audio assessment. Consent is recorded for your account, not requested for every take. Preparing original-take assessment tells you when recording and automatic submission will occur. You can leave it off and continue ordinary practice. Avoid including sensitive or unnecessary personal information in your responses.
OpenAI API data is not used for model training unless the customer opts in; DATOEFL does not opt in to sharing assessment data for training. We request non-stored responses. OpenAI may nevertheless retain content in abuse-monitoring logs for up to 30 days, or longer for legal or safety reasons; endpoint-specific retention and prompt caching can also apply. Our setup is not a promise of Zero Data Retention. See OpenAI’s API data controls.
We use Azure’s standard real-time Speech endpoints without audio or transcript logging, custom voice training or batch-recording storage. Microsoft describes real-time transcription and pronunciation assessment as processing without retaining the submitted audio or transcript. See its Speech data-handling notice and optional logging documentation.
What we store when you have an account
- Your email address, to sign you in and to contact you about your account.
- A public handle, if you post in the community. Your email is never shown on a community page.
- Your progress and scores, plus any historical coin or access-pass records retained from an earlier version of the service.
- Writing you submit for review. The teacher review service means a person reads what you wrote. That is the service, not a side effect of it.
- Community posts you make, and reports you file.
Payments
New paid checkout is currently disabled. The database may retain legacy payment and subscription identifiers needed to administer an earlier obligation, and the signed PayPal webhook remains available for those lifecycle events. DreamArcade does not receive or store card details.
Who else processes your data
- Supabase — hosts the database and handles sign-in.
- Vercel — serves the site.
- OpenAI — processes submitted Writing responses and Speaking recordings/transcripts for requested automated assessment.
- Microsoft Azure Speech — temporarily processes Listen & Repeat and Interview recordings for pronunciation and delivery evidence.
- PayPal — handles signed lifecycle events for legacy payment records; new checkout is disabled.
- Resend — sends account email.
- Google Fonts — the site loads typefaces from Google, so Google sees that request and your IP address with it.
- Vercel Web Analytics — counts page views and where visitors arrived from. It sets no cookie and does not follow you to other sites. Vercel already serves every page here, so this adds no new company to the list above.
Anonymous posting, precisely
Posting anonymously is anonymous to other readers by construction: the database views the site reads from drop the author id and blank the handle before anything reaches a browser. It is not anonymous to us — the underlying row still records who wrote it, so moderation and abuse reports remain possible. Worth knowing before you rely on it.
What you can ask for
A copy of what we hold about you, a correction, or deletion of your account and its data. Ask via the contact page. Deleting your account removes your progress with it, and that cannot be undone.
Written to be accurate rather than exhaustive, and not yet reviewed by a lawyer. If you are relying on something here and it is unclear, ask before you rely on it.