Privacy Policy

Last updated: June 2026

1. Information We Collect

When you create an account, we collect your email address and a password hash. When you use the service, we store the text you paste and the flashcards generated from it.

2. How We Use Your Data

Your data is used solely to provide the flashcard generation and review service. We do not sell, rent, or share your personal information with third parties.

3. Data Storage

All data is stored on servers in the US-East region (AWS Lightsail). We use industry-standard encryption in transit (TLS) and at rest.

4. Cookies

We use a single session cookie (q_token) to keep you logged in. It is HttpOnly, SameSite=Lax, and expires after 7 days. We do not use tracking cookies or third-party analytics.

5. Third-Party Services

Flashcard generation uses the DeepSeek API. Text you paste is sent to DeepSeek's servers for processing. No account data is shared. We use Chart.js (CDN) for dashboard visualizations.

6. Data Deletion

You can delete individual flashcards at any time. To delete your entire account, contact us. Deleted data is soft-deleted and permanently removed within 30 days.

7. Changes

We may update this policy. Material changes will be communicated via email or site notice.