Privacy Policy

This Privacy Policy explains how flashcard.page collects, uses, discloses, and protects personal information when you use the site, create or study flashcard sets, sign in, collaborate through shared links, or contact us.

flashcard.page is a browser-based flashcard workspace. It lets you create, import, edit, organize, study, and share flashcard sets. Accounts are optional, but some features such as syncing, account settings, and account deletion require a signed-in account.

If you have questions about this policy or want to exercise a privacy right, contact contact@flashcard.page.

1. Information We Collect

Information you provide directly

• Account information such as your name, email address, and selected sign-in method.
• Authentication-related data such as linked Google account details, magic-link login data, and passkey metadata if you choose to use passkeys.
• User content you create or upload, including flashcard set titles, card content, imported material, uploaded images, and feedback you submit.
• Study and workspace data such as progress, learning state, study session activity, recent set access, and collaboration-related edits.

If you include personal information inside flashcards, uploads, or feedback, that information will be processed as part of the content you choose to store in the app.

Information collected automatically

• Technical and device information such as IP address, browser type, device type, operating system, language, and referring URLs.
• Session and security information such as session identifiers, user-agent data, authentication events, and rate-limit or abuse prevention signals.
• Local browser data such as cookies, local storage, and session storage used for essential app behavior, consent choices, and saved preferences.
• Error and diagnostic information used to monitor reliability and fix problems.

Analytics data

We use PostHog for product analytics. Before you grant analytics consent, we limit this to minimal anonymous analytics such as basic pageview and pageleave events with sanitized URLs, along with limited non-identified operational product events. We use this limited measurement to understand overall traffic, monitor product usage at a high level, and keep the service working.

If you grant analytics consent, PostHog may also receive broader usage information such as feature usage and event properties related to how you use flashcard.page. You can turn that expanded analytics tracking off again later in Account settings.

Information from third parties

When you choose to sign in with Google, we receive basic account information from Google, such as your email address, name, and profile image, as permitted by your Google account settings and the scopes you approve.

2. How We Use Information

• To provide and operate flashcard.page, including creating and syncing flashcard sets, enabling collaboration, and running study sessions.
• To authenticate users, secure accounts, and support optional sign-in methods such as Google, magic links, and passkeys.
• To store uploaded images, shared-link access, and account-related preferences.
• To detect, investigate, and prevent abuse, fraud, security issues, and service outages.
• To monitor performance, fix errors, and improve the reliability and usability of the product.
• To measure basic anonymous traffic and, if you grant analytics consent, analyze richer product usage through PostHog. Before consent, this may include limited non-identified operational analytics events.
• If you use the in-app feedback widget, we collect that feedback through UserJot so we can review product ideas, bug reports, and other product feedback you choose to send us.
• To send essential service communications such as sign-in emails and account-related notices.

3. Legal Bases For Processing

If you are in the EEA, UK, or another jurisdiction that requires a legal basis, we generally rely on the following:

• Performance of a contract: to provide the service you requested, maintain your account, sync your flashcard content, and process account deletion requests.
• Legitimate interests: to secure the service, prevent abuse, debug issues, maintain reliability, understand basic anonymous traffic patterns, and improve the product.
• Consent: for expanded analytics through PostHog, and for any future optional processing where consent is legally required.
• Legal obligations: where we need to comply with applicable law, lawful requests, or regulatory obligations.

4. Cookies, Local Storage, And Analytics Choices

flashcard.page uses cookies and similar browser storage for essential functionality. This includes keeping you signed in, remembering your theme or interface preferences, storing legal and analytics consent choices, and preserving limited workspace state on your device.

Analytics consent controls expanded product analytics. We may still collect minimal anonymous pageview data and limited non-identified operational analytics without consent, but richer PostHog analytics only turns on after you opt in. You can grant or withdraw analytics consent in the app, and signed-in users can always revisit this setting in Account settings.

If you use the in-app feedback widget, that feedback is sent through UserJot. It does not depend on the analytics consent toggle.

You can also clear cookies and local storage through your browser settings, although doing so may sign you out or reset saved preferences.

5. Error Monitoring

We use Sentry to monitor errors and diagnose reliability problems. When an error occurs, Sentry may receive technical diagnostic information about the failure, such as browser or device details, request context, stack traces, and limited replay or debugging context related to the error.

We use this information to investigate incidents, fix bugs, and improve service stability. We do not use Sentry for advertising.

6. Sharing And Service Providers

We do not sell your personal information. We share personal information only when needed to run the service, comply with the law, protect our rights, or complete a request you make.

• Cloudflare: hosting, edge delivery, R2 object storage for uploaded images, Durable Objects for collaboration, and Hyperdrive database connectivity. DPA: Cloudflare Customer DPA.
• Neon: managed Postgres database infrastructure for application data. DPA: Neon DPA.
• PostHog: minimal anonymous page analytics and limited non-identified operational analytics, plus optional richer analytics after you have consented. DPA: PostHog DPA.
• UserJot: in-app feedback widget and feedback collection when you choose to send product feedback.
• Sentry: error monitoring and diagnostics. DPA: Sentry DPA.
• Google: optional social sign-in if you choose to log in with Google.
• Resend: delivery of authentication emails such as magic-link sign-in emails.

We may also disclose information if required by law, regulation, legal process, or a valid governmental request, or if necessary to protect the rights, safety, and security of users, us, or others.

Categories of recipients

• Infrastructure and hosting providers that help deliver the site and store application data.
• Authentication, email, analytics, and error-monitoring providers used to operate optional or core features.
• Other users or collaborators, but only for content you choose to share through shared links or collaborative features.
• Law enforcement, regulators, courts, or other third parties where we are legally required to disclose information or where disclosure is necessary to protect rights, safety, or security.

7. Shared Links And Collaboration

If you create a share link for a flashcard set, anyone who receives that link may be able to access the set in the mode permitted by the link. Shared or collaborative content should therefore be treated as accessible to the people you choose to share it with.

8. AI Features

flashcard.page does not currently offer live AI-powered features that process personal information through third-party AI providers. If we introduce AI features in the future, we will update this Privacy Policy before launching them so the policy accurately reflects how those features work.

9. Data Retention And Deletion

We retain personal information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce our agreements, and maintain security and backups.

• Account data and flashcard content are generally kept until you delete them or delete your account.
• Study progress, uploaded images, linked sign-in methods, and related account records are deleted from our active systems when you delete your account, subject to limited retention in backups or logs.
• Minimal anonymous page analytics, limited non-identified operational analytics, and, if you opt in, richer analytics data may be retained by PostHog, while error-monitoring data is retained by Sentry in accordance with our service configuration and operational needs.

Signed-in users can go to https://flashcard.page/app/account and use the delete button to permanently delete their account. That flow is intended to remove the account, flashcard sets, study progress, uploaded images, and linked sign-in methods from our active systems.

10. International Data Transfers

Our service providers may process personal information in countries other than the country where you live. When required, we rely on appropriate safeguards for international transfers, including contractual commitments and vendor data processing terms.

Because flashcard.page uses providers such as Cloudflare, Neon, PostHog, Sentry, Google, and Resend, your information may be processed in the European Union, the United States, and other jurisdictions where those providers or their subprocessors operate.

11. Children's Privacy

flashcard.page is a general-audience product and is not intentionally directed to children under 18. We do not knowingly collect personal information from children under 18 without appropriate authorization. If you believe a child has provided personal information to us in a way that should not have occurred, contact contact@flashcard.page and we will review the issue and take appropriate action.

12. Your Rights And Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, and you may have a right to data portability.

• You may request access to the personal information we hold about you and ask for a copy where applicable.
• You may ask us to correct inaccurate or incomplete personal information.
• You can update account details and analytics preferences in Account settings.
• You can withdraw analytics consent at any time, which will stop future expanded PostHog analytics from that browser. It will not necessarily stop the limited anonymous analytics described above.
• You can delete your account through Account settings or contact us to request deletion or access to your data.
• Where applicable, you may also ask us to restrict processing, object to certain processing, or request data portability.
• You can contact us to exercise privacy rights that are available under applicable law.

If you are in the EEA or UK, you may also have the right to complain to your local supervisory authority. If you are in Denmark, you can learn more or file a complaint with Datatilsynet. If you are in the UK, you can contact the Information Commissioner's Office.

We may need to verify your identity before acting on certain requests, including by asking you to make the request through your signed-in account or provide information reasonably necessary to confirm that you are the correct person.

13. Do Not Track

Some browsers offer a Do Not Track setting. Because there is no consistent industry standard for how to interpret or respond to those signals, flashcard.page does not currently respond to Do Not Track signals automatically.

14. Security

We use reasonable technical and organizational measures designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

15. Changes To This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of the page and, where appropriate, provide additional notice.

16. Contact

Email: contact@flashcard.page
flashcard.page
26 Østre Alle, 2. th.
Aalborg 9000
Denmark