Privacy

This is a personal site run by Hemroda Martin, who is the data controller for what it stores. Contact: through the GitLab or GitHub profile linked at the top of the page.

Visitors

Reading the site needs no account and sets no cookies. There are no analytics or advertising trackers. Scripts, stylesheets and images are all served from this site itself: reading a page sends nothing to anyone else. Links to other sites (such as the certificate verification pages) are only followed if you click them. The web server keeps standard access logs (IP address, page, time, browser) for security and troubleshooting.

Review accounts

Accounts exist only for the spaced-repetition review of the study cards, and only by invitation. For each account the site stores:

Data	Why	Kept
Email address and display name	To identify you and log you in	Until the account is deleted
Password, as a salted scrypt hash (never the password itself)	To log you in	Until the account is deleted
Login session: a random token in an HttpOnly cookie named session; the site keeps only its hash	To keep you logged in	30 days, or until you log out
Your answers to each card (rating, time, quiz option chosen, time spent) and the schedule computed from them	To schedule your reviews and show your mastery	Until the account is deleted

The legal basis is the invitation you accepted: the data is needed to provide the review service you asked for (GDPR Art. 6(1)(b)). Nothing is shared with third parties or used for anything else. Your progress is visible only to you and to the site administrator. The one exception is the site owner's own account: the public progress page shows totals of the owner's reviews (cards reviewed, time, retention, mastery). No other account's data is ever shown there.

The cards themselves come from the published notes and are the same for every account. The site owner can also review cards from their own unpublished notes; those are shown only to administrator accounts.

Your rights

You can ask for a copy of your data, for corrections, or for your account to be deleted. Deleting the account also deletes your sessions, schedule and review history (the shared cards themselves stay, as they belong to the notes). You can also complain to your data protection authority (in France, the CNIL).

Security

The site runs over HTTPS. Passwords are hashed with scrypt; login links and sessions are stored only as hashes; repeated failed logins are throttled.