Privacy Policy

This policy explains what personal data DopeStudy collects, why, and what you can do about it. We aim to comply with India’s Digital Personal Data Protection Act, 2023.

What we collect

• Account: your display name, plus the email (Google sign-in) or mobile number (OTP sign-in) you use to log in.
• Contributions: suggestions, new cards, flags, review comments and images you upload. These are public and shown with your display name.
• Linked devices: a device name, a one-way hash of the add-on’s token, the time it last synced and its sync position. We never store the token itself.
• Technical logs: IP address, browser and request logs that our hosting providers keep for security and debugging.
• Crash reports (Android app): only if you agree when the app crashes, or turn on automatic reports. A report holds the error, the app version, your phone model and Android version, memory use, the app’s recent log, its settings and a random install ID. Your sign-in token, username and email are removed before it is stored, and it is not linked to your account.

What we never collect

• Your Anki review history, scheduling, ease or study statistics.
• Personal note fields such as My Mnemonic and My Notes. The add-on does not upload them, and the server rejects them.
• Your AnkiWeb username or password.

Why we use it

• To sign you in and keep your account secure.
• To credit your contributions, keep the deck’s version history and rank the leaderboard.
• To sync approved cards to the add-on on devices you have linked.
• To prevent abuse and keep the Service running.

We do not sell your data and do not use it for advertising.

Who processes it

These service providers handle data for us: Supabase (database and sign-in), Vercel (hosting), Cloudflare (image storage), Google (if you use Google sign-in) and our SMS provider (to send OTPs). Some of them may process data outside India.

Who can see what

• Public: your display name, role, contributions and contribution statistics.
• Only you and admins: your email, phone number and linked devices.

Retention

We keep account data while your account exists. Approved edits are part of the deck’s history and are kept after you delete your account, but they can be anonymised so your name no longer appears on them. Unused add-on link codes expire after 10 minutes. Crash reports are deleted after 90 days.

Your rights

You can see and correct your name on the Account page. To get a copy of your data, delete your account, anonymise your contributions, withdraw consent or raise a grievance, email [email protected]. We will reply within 30 days. You can also unlink a device at any time from the Account page.

Changes

If we make significant changes to this policy, we will update the date above and post a notice on the site.