Privacy Policy — SRL

Last updated: 4 August 2026

SRL (“Spaced Repetition Learning”) is a flashcard study app available as a web app and a Chrome extension. This policy explains what data we handle and why. The web app and the extension share the same account and backend.

What we collect

• Account info. When you sign in, we store your email address and (from social login) your name and avatar URL. Passwords for email accounts are stored only as a salted bcrypt hash — never in plain text.
• Your content. The flashcards you create or import, and your study history (which cards you reviewed, your grades, and the resulting schedule).
• A session token. After you sign in, a signed token (JWT) is stored locally on your device to keep you logged in. The extension keeps it in the browser's local storage; it is sent only to the SRL API.

We do not collect your browsing history. The extension's right-click “Add selection to SRL” only reads the text you explicitly select when you invoke it, and uses it solely to pre-fill a new card.

How we use it

Your data is used only to provide the service: to authenticate you and to store and sync your cards and study progress across the web app and the extension. We do not use it for advertising.

Third parties

• Social sign-in (optional): if you choose Google, GitHub, or Yandex, that provider handles the sign-in and returns basic profile info (email, name, avatar). Their own privacy policies apply during that step.
• Hosting: the backend and database run on Railway.

We do not sell your data or share it with third parties for their own purposes.

Storage & retention

Your account and content are kept in the app's PostgreSQL database for as long as your account exists. The local session token is removed when you log out.

Deleting your data

To delete your account and all associated data, email the address below and we will remove it.

Permissions the extension requests

• storage — to keep your session token so you stay signed in.
• contextMenus — for the “Add selection to SRL” right-click item.
• Host access to the SRL API — to load and save your cards and study progress.

Contact

Questions or data-deletion requests: e.didar.2001@gmail.com