Privacy Policy

Last updated: June 2026

1. Data We Collect

• Email address — when you sign in via magic link
• Study content — text you paste to generate cards (processed, not stored long-term)
• Usage events — page views, card generation counts (via GA4)
• Session recordings — anonymised screen interactions (via Microsoft Clarity)
• IP address — standard server logs, retained 7 days

2. How We Use Data

To provide the service (auth, deck storage), improve the product (analytics), and prevent abuse (rate limiting).

3. Analytics

We use Google Analytics 4 and Microsoft Clarity. These tools may use cookies and collect anonymised usage data. You can opt out via browser settings or extensions.

4. Cookies

• sb-* — Supabase session cookie (httpOnly, necessary for login)
• GA4 / Clarity cookies — analytics (can be blocked via browser)

5. Data Retention

• Account & decks: retained while account is active
• Server logs: 7 days
• Analytics: per GA4 / Clarity retention settings

6. Third Parties

• Supabase — auth & database
• Stripe — payment processing
• Anthropic — AI card generation
• Google Analytics 4
• Microsoft Clarity

7. Your Rights

You may request deletion of your data at any time by emailing us. We will process requests within 30 days.

8. Contact

[email protected]