Privacy

Updated 17 October 2026.

The short version

• No ads, no tracking and no analytics scripts. We don't sell what we know about you or share it for advertising.
• We don't use AI to read, write or change your cards.
• Your sets are kept so your group can work on them together. Anyone with a set's link can open it.
• Joining a game needs no account and no email. An account is optional: to keep your sets on more than one device, and for study groups.
• Finished games are deleted after 30 days.

Kept in your browser

These stay on your device and go nowhere unless you sign in or open a set or game: your name and colour, a random id that tells games it's you, the list of sets you've opened (with your pins, your folders, their terms and which you archived, and how you sort it), a copy of each set you've opened so it can be studied offline, which cards you know, your settings, the games you've hosted, a key for each game you host, the keys that show you own sets you made, and, if you answered it, that you said you're 13 or older (never your age). Signed in, it also keeps your sign-in, your school badge, your study groups and, with a Host Pass, the pass and your game nights. Clearing your browser's data removes all of it. We don't use cookies.

Sets

Sets live on Cloudflare, so your group can edit them together. For each set we keep:

• its title and its cards (fronts, backs, topics, elements, sources, case briefs and slides), exactly as people typed them;
• the name and colour of whoever wrote each card, and comments and “needs a check” marks with their names;
• deleted cards, for 30 days, so they can be brought back;
• up to 30 saved versions of the whole set (100 while its owner holds a Host Pass), with the name of whoever saved each one;
• a scrambled copy (a hash) of the owner's key, and the set's view-only link.

A set is kept until its owner deletes it, or we delete it when asked. Anyone with its link can open it: links are long and random, nobody finds a set by guessing, and there's no search or public list. Treat a link like a key: share it with your group. While a set is open, the others in it see your name and colour; that isn't stored.

Games

Joining a game on a phone takes a name and a colour, nothing else: no account, no email. For each game we keep the players' names, colours and scores, what they typed into the game, and the cards on the board, so a dropped phone can rejoin. A game set up with a Host Pass also keeps which account set it up, to check that the pass still runs, and a game played from a study group's set keeps which set, for the group's record. A game is deleted 30 days after it was last played, along with everything in it. (A game played before 17 October 2026 is deleted the next time its code is used.)

If you keep your sets

An account is optional. If you sign in with your email, we keep, on Cloudflare: your email; your name and colour; your list of sets (each one's link, title and counts, your pins, your folders with their terms and which you archived, and the key that shows you own it, if you do); the devices you're signed in on, as scrambled copies of their keys; and when you said you're 13 or older. Your cards aren't copied into your account; they stay at each set's link. Sign-in codes are kept only as scrambled copies, and work for 15 minutes.

With a Host Pass, your account also keeps the pass (which kind, and until when) and the games you host: each game's set, title and date, how many played, and who won. If you make a chip-in link, anyone who opens it sees your name. Buying a pass isn't switched on yet, so we keep nothing about payments.

Delete my account, on the You page, deletes your account and its list from our server and signs out every device. Your sets stay at their links. Signing out removes only that device's sign-in.

Study groups

A study group needs an account. For each group we keep, on Cloudflare:

• its name, and the school it shows, if its maker shows one;
• each member's name and colour, and who made the group;
• the sets put in it: each set's link, title and card count, and who added it;
• its game nights: the date, the game, the set, how many played, who won, how many cards nobody got, and the link to the set made of them, if the host made one.

Only the people in a group see who's in it, its sets and its game nights. There's no chat and no list of groups. Putting a set in a group gives everyone in it the set's edit link. Your account keeps which groups you're in.

Anyone with a group's link can join once they sign in, until the group holds 30. Its maker can make a new link, and the old one stops working.

This term at your school is off unless the group's maker turns it on, and only a group showing its maker's school badge can. Then other groups at that school that turned it on see the group's name, how many game nights it played this term and how many cards were added to its sets. Never a member's name, a score or who did what. Hiding or removing the maker's badge takes the group off.

Leaving a group, or being taken out of it by its maker, takes your name and colour off it, and its sets off your list in that browser, unless you pinned them, filed them or made them. Who won a game night stays in the group's record. Delete my account takes you out of every group first; a group with nobody left in it is deleted.

Email

We send email for four things only: sign-in codes, codes to add a school address, invites someone sends you to a set, and invites to a study group. They go out through Resend, an email service, which sees the address and the message to deliver it. No newsletters, and apart from the email service we never share your address.

• School badges: when you add a school address, we email it a code and keep only the school's part (like uoregon.edu), never the address. The badge shows beside your name in sets you open, while you choose to show it.
• Invites to a set: the email carries the set's title, the sender's name (and school, if they show it) and the link. The invite waits for you under a scrambled copy of your address, even if you have no account, and is dropped after 30 days. The email's “Don't send me invites” link stops all of them; we keep that you asked, even if you later delete your account.
• Invites to a study group: one email with the group's name, the sender's name, their school if they show it, and the link. It waits with that address for up to 30 days until it's answered. These follow the same limits as invites to sets, and the same link in the email stops them.

Reports and notes

When you report a set or a name, or send us a note, we keep what you sent: which set (its link and title) or which name in which game, the reason you picked, your note, and your email if you chose to leave one. A note from the feedback page also carries the page you came from, with any set link or game code taken out, and your browser's make and system (like “Safari 18 on iOS”). We never keep your network address with them. We keep them as a record of what we did, the newest 2,000 at most.

Your network address

Like any website, the site's hosts see your IP address when your device asks for a page: Vercel for the site and Cloudflare for sets and games, each under its own privacy policy. Vercel keeps its request logs for a day at most on our plan; we haven't switched on stored logs for the live server on Cloudflare. To slow down anyone trying game codes or flooding the server, the server counts requests from each network, using a scrambled copy of its address. The counts last a minute, and the address is never saved.

What we count

Each day, the server counts how many games were hosted and which game each was, how many players joined, how many sets were made, how many sign-ins there were, and how hosts rated their games at the end (Great, OK or Confusing). Those counts are all it keeps: nothing about who, which set, or what was in it. A note a host adds to a rating comes to us like any other note.

Do Not Track

We don't track you across sites, or at all, so there's nothing for Do Not Track or Global Privacy Control to switch off. If that ever changes, this page changes first.

Children

Accounts are for people 13 and older; we ask before anyone makes one. Anyone can join a game with a code, which keeps no personal details beyond a name for that game. If we learn that someone under 13 made an account or sent us personal information, we delete it. A parent who thinks this happened can tell us and we'll delete it.

Deleting things

• Your account: Delete my account on the You page.
• A set you own: Delete for everyone in its ··· menu on Your sets; its cards leave our server, and every link stops working.
• What's in your browser: clear its data for this site.
• A set you don't own, or a game you played: ask us, and we'll delete it sooner.

Changes

When this page changes, the date at the top changes. If a change matters, the app will say so.

Questions, problems or a takedown request? Send us a note.