Privacy policy
EverydayFlashcards is a Chrome and Edge extension plus a website for managing and reviewing a shared, signed-in flashcard library.
An Account is required. Firebase Authentication handles sign-in. Decks, Cards, optional images, review schedules, and ratings are stored by the EverydayFlashcards service on Railway. We do not sell data or run ads.
What the service stores
- Your email and Firebase user id after you sign in with Google, GitHub, or email.
- Decks and cards you create or import, including optional images you upload or generate.
- Image-generation queue status and short error codes used for retry and support.
- Review state such as ratings, due dates, intervals, and the last review time.
What the extension stores
The extension stores an EverydayFlashcards session token, Overlay preferences, excluded-site origins, and the draggable Overlay position in browser local storage. It uses the session token to load due Cards and send review ratings to the Railway API.
Version 0.3.0 no longer maintains a separate local Library. After the
first successful Account sign-in, it silently deletes the legacy
anki-flashcards IndexedDB, including old local Decks,
Cards, Drafts, and schedules. That deletion is not migrated and cannot
be undone.
What we do not collect
- No browsing history or webpage content from the Overlay.
- No personal communications, location, health, or financial data.
- No analytics, advertising identifiers, tracking, or telemetry.
Why webpage access is requested
The review Overlay is injected into webpages so you can review due Cards without leaving the page you are reading. The extension checks the current page origin only to honor the local excluded-site setting, then renders its isolated interface. It does not read, store, or transmit webpage content or browsing history.
Third parties
Sign-in is handled by Firebase Authentication (Google, GitHub, or email). Google and GitHub provide their OAuth account flows. Account, Deck, Card, image, and review data are stored on Railway. Card text generation may happen outside the product through the pipeline you choose; the website imports only the JSON export you select.
When you explicitly request a Card image in the Backoffice, the server-side image worker sends that Card's Chunk, Meaning, source quote, and example sentence to exactly one configured provider: Google Gemini, Cloudflare Workers AI, or OpenRouter. The repository default OpenRouter model is Krea 2 Medium Turbo; production is currently configured for ByteDance Seedream 5.0 Lite at 2K. The selected provider returns an illustration and the service stores that image on Railway; a provider failure does not silently send the Card to another provider. Bulk generation sends the same fields once for each Card without an image in the selected Deck. This flow does not send webpage content or browsing history. The provider is selected by the service operator, not by webpage content.
Data removal
Delete decks and cards in the website library, or email hello.adored@gmail.com to request account deletion. Removing the extension deletes its local token and preferences but does not delete the cloud Account or Library. Imported source files remain wherever you stored them outside the product.
Contact
Questions and support requests can be sent to hello.adored@gmail.com.