FlipStudy

Privacy Policy

Last updated: March 25, 2026

At FlipStudy ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, and safeguard your information when you use our flashcard creation and study service.

Information We Collect

Email Address (Optional)

If you choose to provide an email address when creating a card set, we store it as a cryptographic hash (SHA-256 with a unique salt). We do not store your email address in plaintext. The hashed email is used solely for verifying your identity when you request an edit link for your card set.

Card Set Content

When you create flashcard sets, we store:

  • Card set titles
  • Flashcard front and back text
  • Creation and modification timestamps

Usage Information

We collect anonymous, aggregated usage data to understand how the service is used:

  • Daily study view counts per card set (no individual tracking)
  • Card set creation counts

Cookies

We use a minimal number of cookies, strictly for functionality:

  • flipstudy-session: A short-lived (2-hour) HTTP-only cookie set when you authenticate via magic link to edit a card set
  • localStorage: A flag to remember whether you have seen the keyboard shortcut help overlay

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Send you magic link emails when you request edit access to your card sets
  • Understand aggregate usage patterns to improve the Service
  • Detect and prevent abuse

Information Sharing

We do not sell your information. We may share information with:

  • Email Service Provider: We use Resend to deliver magic link emails. Your email address is transmitted to Resend solely for email delivery.
  • Legal Requirements: When required by law or to protect our rights and safety.

Public Card Sets

Card sets are accessible to anyone with their unique URL. Do not include sensitive, private, or confidential information in card sets. There is no password protection on card set viewing or studying.

Data Security

We implement appropriate measures to protect your information:

  • Encryption of data in transit (HTTPS/TLS)
  • Email addresses stored as cryptographic hashes, not plaintext
  • Magic link tokens are single-use and expire after 15 minutes
  • Session cookies are HTTP-only and expire after 2 hours

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Your Rights and Choices

  • Deletion: If you have edit access to a card set, you can delete it at any time. This removes all associated cards and data.
  • No Email: You can create and use card sets without providing an email address.
  • Cookies: You can control cookies through your browser settings, but disabling them may affect edit functionality.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

Data Retention

Card set data is retained for as long as the card set exists. We may periodically remove card sets that have not been accessed for an extended period. Magic link tokens are automatically cleaned up after expiration.

Changes to This Policy

We may update this Privacy Policy from time to time. Your continued use of the Service after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy, contact us at: privacy@flipstudy.co