Privacy Policy

Summary: We do not sell your data or share it for advertising. We collect and store only what is needed to run StudyPoints and the optional browser extension.

Who this applies to

This policy covers studypoints.io (the website) and the StudyPoints browser extension. Together we refer to these as “StudyPoints” or “the service.”

What we collect and why

Account and sign-in

If you create an account, we use a third-party identity provider (Auth0) to sign you in securely. We receive basic account details such as your email address and display name so we can associate your decks and progress with your account.

Your username and optional profile biography are shown on your public profile page at studypoints.io/u/yourname. Your email address is not displayed on that public page.

Content you create and study

We store flashcard decks, questions, study progress, deck visibility settings, and related data you generate or save on the site. This is required to create decks, study on the website, and sync your experience across sessions.

AI deck generation

When you ask us to generate flashcards, the text you provide in your prompt is sent to an AI service to produce questions. We use that output to build your deck. Do not include sensitive personal information in prompts unless you are comfortable with it being processed for generation.

Contact and support

If you use the contact form, we receive the name, email, subject, and message you submit so we can respond. We may use spam-protection tools (such as Cloudflare Turnstile) that process minimal technical signals to block abuse.

Browser extension

The extension is optional. If you install and pair it with your account, we store:

• A device token so the extension can authenticate to your account without storing your website password in the extension.
• Extension settings you choose (for example quiz interval, enabled decks, and allow/disallow site lists).
• Quiz delivery and answer submissions through our API, including which flashcard was shown and your selected answer, so quizzes work and stay in sync with your account.
• Question flags you submit from the extension, same as on the website.

The extension measures active browsing time locally in your browser to decide when to offer a quiz. It checks the hostname of the tab you are using against your allow/disallow lists. We do not receive a log of every page you visit, your full browsing history, or the contents of web pages you read.

Some extension UI may load from studypoints.io (for example flashcard pages in a tab or overlay). Those pages use the same data practices described here.

What we do not do

• We do not sell your personal information.
• We do not share your data with third parties for their own marketing or advertising.
• We do not collect more than is reasonably necessary for the features you use.

Service providers

We use trusted providers only to operate the service—for example hosting, authentication, email delivery, AI generation, and security. They process data on our instructions and only as needed to provide those functions. They are not permitted to use your data for their own unrelated purposes.

Data retention and security

We keep account and deck data while your account exists and as needed to provide the service. You can contact us to ask about deletion of account-related data. We use reasonable technical and organizational measures to protect stored data; no method of transmission or storage is completely secure.

Your choices

• You can uninstall the browser extension and revoke pairing from the site at any time.
• You can control which decks are enabled for the extension from Browse Decks.
• You can adjust extension site allow/disallow lists and turn quizzes off in extension settings.

Children

StudyPoints is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the service after changes means you accept the updated policy.

Contact

Questions about privacy? Contact us.