1. Information We Collect

Account information: Name and email address when you register.

Study activity: Your flashcard progress (known/review later status), mini exam results, full exam results, and study streaks. We use this to power your dashboard and metrics.

Payment information: Subscription and payment data is processed by Stripe. We receive a Stripe customer ID and subscription status but never see or store your card number, CVV, or bank details.

Device information: A randomly generated device identifier stored in your browser (used solely to enforce the Lifetime plan single-device restriction).

Usage data: Standard web server logs (IP address, browser type, pages visited) for security and debugging.

Email capture: When you submit your email address to receive free practice questions, we store your email and send you a welcome email followed by periodic study tips. You can unsubscribe at any time using the link in any email.

Analytics data: We use Google Analytics 4 to collect information about how you use the Service, including pages visited, browser type, device type, and a GA client ID cookie. We may associate analytics data with your account for conversion measurement. For more information, see Google's Privacy Policy.

Marketing attribution: When you arrive from an advertisement, we capture UTM tags and Google click identifiers (gclid) from the URL. These are stored with your account and may be shared with Google Analytics 4 for conversion measurement.

2. How We Use Your Information

To provide and improve the Service
To authenticate your account and enforce subscription access
To display your study progress and metrics
To process payments and manage your subscription via Stripe
To send transactional emails (account creation, password reset)
To measure the effectiveness of our advertising through analytics and conversion tracking
To respond to support requests

3. Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We share data only with:

Stripe - payment processing
Neon.tech - database hosting (PostgreSQL)
Vercel - application hosting
Resend - transactional email delivery
Google Analytics - website analytics and conversion measurement

Each of these providers processes data under their own privacy policies and applicable data protection agreements.

4. Cookies and Local Storage

We use the following cookies and local storage:

Essential cookies - session management and authentication via NextAuth (always active)
Google Analytics cookies - the _ga cookie is set only after you accept analytics cookies via our consent banner
Attribution cookie - stores UTM parameters and Google click identifiers (gclid) from advertising URLs for up to 90 days
Device identifier - stored in browser localStorage for the Lifetime plan single-device restriction

Google Analytics and attribution cookies are blocked by default until you accept them through our cookie consent banner. Declining cookies does not affect the functionality of the Service.

5. Data Retention

We retain your account and study data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g., billing records).

6. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws, including the right to access, correct, export, or delete your personal data. To exercise these rights, email support@arteura.com.

7. Security

We use industry-standard practices including bcrypt password hashing, HTTPS encryption, and Stripe's PCI-compliant payment infrastructure. No security system is perfect; we encourage you to use a strong, unique password.

8. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions? Email support@arteura.com.