Privacy Policy

This Policy explains how RecallDeck handles personal data when you visit, sign in, study, purchase access, or contact support. It does not govern GitHub, Polar, or other third parties when they independently process data under their own policies.

Data controller: RecallDeck.

Privacy and data requests: support@recalldeck.dev.

• Account data. GitHub ID, username, display name, avatar, and information GitHub returns for the sign-in session, including an email address. RecallDeck’s primary database stores the GitHub ID and public-profile fields; we do not request or read repositories.
• Study data and preferences. Selected track, daily pace, card state, grades, intervals, review history, records, onboarding status, language, theme, control mode, and time zone offset.
• Access and billing data. Plan, subscription or trial status, period dates, cancellation state, Polar customer, subscription, product, and order identifiers, and the Terms version accepted when continuing to checkout. Polar separately collects payment and tax details; RecallDeck does not store your full card number.
• Technical data. Hosting and infrastructure providers may process IP address, device and browser type, request time, URL, and security or error logs.
• Analytics with consent. If you allow analytics, Google Analytics 4 receives device information, approximate region, pages viewed, and product events such as plan selection or checkout start.
• Communications. Your email address and message contents when you contact us.

We receive data from you and your browser, from GitHub when you sign in, from Polar after checkout and billing events, and from infrastructure providers when they report errors, security events, or Service health.

• Contract: create your account, save progress, build study queues, show stats, deliver purchased access, and provide support.
• Legitimate interests: secure the Service and users, prevent fraud and abuse, diagnose errors, and maintain reliability. We balance those interests against your rights.
• Consent: load optional analytics. You can withdraw through Privacy choices; withdrawal applies going forward.
• Legal obligation: comply with law, valid government process, and applicable accounting, tax, and payment duties.

RecallDeck uses these browser-storage categories:

• Necessary: the secure Auth.js session cookie and language and time-zone cookies. They support sign-in, security, and correct localization.
• Preferences: theme, language, control mode, and your analytics choice are stored locally so the browser remembers them.
• Analytics: Google Analytics cookies (typically _ga and_ga_*) are created only after consent.

Blocking necessary cookies may break sign-in. Rejecting analytics does not limit RecallDeck features. You can also clear cookies and local data in your browser settings.

We share only what is needed for each function with:

• GitHub for sign-in and profile information;
• Polar for checkout, subscriptions, tax, receipts, refunds, and billing support;
• Turso for account and progress database hosting;
• Vercel for web hosting, delivery, and operational logs; and
• Google Analytics for optional analytics only after consent.

We may also disclose data where required by law, to protect rights and safety, investigate fraud, or complete a project reorganization with appropriate safeguards. We do not sell personal data or share it for cross-site behavioral advertising.

Providers may process data in the United States and other countries with different privacy laws. Where required, we rely on contractual safeguards, an adequacy decision, or another lawful transfer mechanism. Contact us for information about the mechanism relevant to a particular provider.

Account and study data are kept while your account is active or as reasonably needed to provide the Service. After a verified deletion request, we delete or de-identify them within a reasonable technical period, except where data are needed for security, a dispute, or legal compliance.

Polar keeps payment, tax, and transaction records under its policy and legal obligations. Operational logs and backups roll off according to provider cycles. Your analytics choice stays in the browser until you change it or clear site data.

Depending on where you live, you may request access, a copy, correction, deletion, restriction, or portability; object to processing; withdraw consent; learn recipient categories; and complain to a data-protection authority. Residents of some US states may have rights to know, delete, or correct data and not be discriminated against for making a request.

RecallDeck does not sell or “share” data for cross-context behavioral advertising. To make a request, email us from the address associated with the account and include your GitHub username. We may verify identity and apply a lawful exception. Billing data may require a separate request to Polar.

We use reasonable technical and organizational measures, including OAuth instead of RecallDeck passwords, secure session cookies, data isolation by internal user ID, signed billing webhooks, and server-side secrets. No internet service can promise absolute security. Contact us if you suspect a problem.

RecallDeck is intended for adults and is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child submitted data, contact us so we can investigate and delete it.

The spaced-repetition algorithm calculates your queue and next review date from your grades. It does not make decisions with legal or similarly significant effects. We do not use RecallDeck account or study data to train a public generative-AI model.

We may update this Policy when the Service, providers, or law changes. We will post a new date above and give additional notice of a material change where reasonably practical or required.

Data controller: RecallDeck.

Privacy and data requests: support@recalldeck.dev.