Privacy Policy

Effective date: September 1, 2026

This policy explains what AWS Study Hub ("we", "us") collects when you use aws-study-flashcards-app.com and its subdomains (the "Service"), why, and the choices you have. The short version: we collect the minimum needed to run a study service — your account, your study progress, and payment status — and we don't sell your data to anyone.

1. What we collect

Data	Examples	Why
Account data	Email address, display name, avatar choice; Google account email/name if you sign in with Google	Creating and securing your account, receipts, account notices
Study progress	Quiz scores, XP, streaks, achievements, flashcard status, exam-simulator results	Saving your progress and syncing it across devices
Payment status	Subscription plan, status, and billing period; a Stripe customer reference	Knowing what you've purchased. Card numbers go directly to Stripe — we never see or store them.
Usage analytics	Pages visited, approximate location, device type (Google Analytics)	Understanding how the Service is used, improving it

Guest mode stores progress only in your browser's local storage — nothing is sent to our servers until you create an account.

2. Cookies and local storage

Authentication cookie on .aws-study-flashcards-app.com so that signing in once works across the hub and game subdomains (essential).
Local storage for study stats, preferences, and guest progress (essential).
Google Analytics cookies for usage analytics (optional — see "Your choices").

3. Service providers

We share data only with the processors needed to run the Service:

Google Firebase (authentication and database) and Amazon Web Services (hosting, and — as we migrate — authentication and database): store your account and progress data.
Stripe: payment processing; subject to Stripe's privacy policy.
Google Analytics: usage analytics.

We do not sell your personal information, and we do not share it with advertisers.

4. Your choices and rights

Analytics opt-out: Settings → Analytics Preferences turns Google Analytics off for your browser.
Access and portability: email us for a copy of the data we hold about you.
Correction: update your display name, avatar, and password in Settings.
Deletion: delete your account in Settings → Danger Zone; this removes your account and study data from our systems. Payment records held by Stripe are retained as required for tax and accounting law.
Depending on where you live (e.g. the EU/EEA, UK, or California), you may have additional statutory rights — contact us and we will honour them.

5. Data retention

Account and progress data are kept while your account exists and deleted when you delete your account. Analytics data is retained per Google Analytics' standard retention settings. Backup copies may persist briefly before rotating out.

6. Security

Data is encrypted in transit (TLS) and at rest by our cloud providers. Passwords are handled by Firebase Authentication / Amazon Cognito — we never store them ourselves. No system is perfectly secure; if a breach affects your data we will notify you as required by law.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site or by email, and the effective date above will be updated.

9. Contact

Privacy questions or requests: nico@nicolasroldos.com