Privacy

If you sign in, an account record holds your email address and a display name derived from it. Sign-in is by emailed link; no password is set or stored.

Once signed in, the application records only what the features need:

• Reading progress — how far into each note you have read, the heading you were last beside, and when. Saved at most once every ten seconds while reading.
• Bookmarks — which notes you have saved.
• Revision schedule — when each finished note is next due, and a log of each time you revised, snoozed or dismissed it.
• Study details — only if you enter them on your account page: target Prelims year, attempt number, optional subject and Mains medium.
• Map practice — for each answered site in a practice round: the site, the drill, whether your answer was accepted, how far off a placed pin landed, and when. What you type in the naming drill is not stored.
• PYQ marks — the questions you mark “got it” or “revisit”, and when you last changed each mark.

Reading time is not recorded. Nothing measures how long a note stays open — only that it was opened, and how far down.

Search runs against the database and is not retained as a query log. Search terms are never written to the application’s logs: the logger allowlists its fields and redacts email addresses and tokens from anything that passes through it.

A rate-limit counter records a one-way hash of your email address or IP with a request count, so that sign-in links and searches cannot be abused. It cannot be reversed to recover the original value.

The assistant at /ai is labelled Preview and does not currently send anything anywhere. It returns a fixed example response and calls no model. If that changes, this page will say what is sent, to whom, and how long they keep it — before the change ships, not after.

The notes are personal study notes. Material derived from third-party sources is recorded as such, with its attribution stored alongside it, and is private by default — the database refuses to store third-party-derived content without an attribution, and only material explicitly marked public is served to anyone who is not signed in.

Every table holding your data is protected by row-level security keyed on your account, enforced by the database rather than by application code. Another signed-in user cannot read your progress, bookmarks or revision schedule even if the application had a bug that asked for them.

Nothing is sold, and there is no advertising or third-party analytics. Error logging is off unless explicitly enabled, and when enabled records event names, durations and error types — never message contents, queries, or your email address.

Deleting your account removes every row belonging to it — progress, bookmarks, revision history, practice results and profile — by database cascade, not by a cleanup job that might miss something. To request deletion, contact the site operator.

This page is a placeholder pending review. Material changes will be reflected here, with the date above updated.