Privacy Policy

Last updated: October 2026

This document was drafted as a reasonable baseline for a small personal project and has not been reviewed by a lawyer. It is not a substitute for professional legal advice.

1. What we collect

• Account data: the email address and password you provide when signing up. Passwords are never stored in plain text — they are hashed (PBKDF2, salted) before being saved.
• Your content: anything you save, such as flashcards.
• Technical data: standard request data (IP address, browser info) processed by Cloudflare, our hosting provider, to run the Service and prevent abuse (e.g., via the Turnstile captcha on signup).

2. How we use it

We use your data only to operate the Service: to let you log in, keep your saved content, and keep the Service working and free of spam/bot abuse. We do not use your email for marketing, and we do not sell your data.

3. Where it's stored

Data is stored on Cloudflare's infrastructure (Workers KV), the same provider that hosts this website. We don't use any other third-party data processor beyond Cloudflare.

4. Cookies

We use a single essential cookie to keep you logged in (a random session token, not readable by JavaScript). We don't use tracking or advertising cookies.

5. Your rights

You can ask us to delete your account and all associated data at any time via theContact page. We will remove your account, your stored content, and your email from our systems.

6. Children

The Service is not directed at children under 16. If you believe a child has created an account, contact us and we will remove it.

7. Changes

We may update this policy as the Service evolves. Significant changes will be reflected by updating the date above.

8. Contact

Questions about your data? Reach out via the Contact page.