Privacy

This page describes what Deck Trainer actually does, based on how it is built - not a generic template. If anything here seems inconsistent with what the app does, that's worth reporting as a bug in the policy itself.

Accounts and authentication

Creating a deck requires an account. Registration and login are handled entirely by Keycloak, an identity provider running as part of this same service (not a third-party company) - your email address and password never pass through or get stored by Deck Trainer's own application code. The browser keeps your login token in memory only, for the current tab; it is not written to localStorage or sessionStorage. Keycloak sets its own session cookie so you stay signed in between visits without re-entering your password every time - that cookie belongs to Keycloak, not to application code we wrote.

Cookies and browser storage

Deck Trainer's own frontend code does not set cookies and does not use localStorage or sessionStorage for anything - not for login, not for preferences, not for anything else. The only cookie involved anywhere on this site is Keycloak's own login-session cookie, described above.

Your flashcard data and study progress

Decks, cards, and your review history (due dates, how many times you've reviewed a card, how you rated it) are stored server-side, tied to your account, in a database this service runs. This is deliberate, not incidental: it's what lets your progress follow you across devices. None of it is stored in your browser.

If you import a deck (an Anki .apkg file or a CSV file), the cards and any referenced images or audio are uploaded and stored on the server as part of your account's data.

What this site does not do

• No analytics or usage tracking of any kind
• No error-reporting/crash-monitoring service
• No advertising, and no advertising trackers or pixels
• No third-party APIs receive your data - the backend makes no outbound requests to any external service
• No payment processing - the app is free and does not handle payments
• No external fonts or scripts are loaded from third-party domains

Deleting your data

There is currently no self-service way to delete your account and data from within the app. If you need your account and its data removed, this is a manual process on the operator's side for now - a gap the operator is aware of, not a hidden limitation.

Changes to this page

If the app's actual behavior changes - a new integration, a new storage mechanism - this page should be updated to match before that change ships, not after.