Privacy Policy

This privacy policy is short for a reason: StudyBonk's architecture makes most of it unnecessary. There are no accounts, no analytics, no cookies, no trackers and no server-side storage — so there is no database of user data to describe, protect or leak. The details below explain exactly what does exist and where it lives.

Summary: we collect nothing

StudyBonk does not collect, store, transmit or sell any personal data. When you study, the site cannot know who you are, what device you use beyond serving the page, or how you performed — because nothing about your activity is ever sent anywhere.

Most privacy policies explain how your data is handled. This one mostly explains why there is no data to handle: every feature that would normally require a server — progress, decks, gamification, the AI tutor — was engineered to run entirely in your browser instead.

What we do not collect

For the avoidance of doubt, here is the full inventory of what StudyBonk does not have. We run no analytics of any kind and keep no server logs of user activity beyond what Cloudflare's standard static hosting necessarily does at the network edge to serve pages (routing and denial-of-service protection, for example). Those infrastructure-level functions are operated by Cloudflare, not StudyBonk, and are not used to profile users.

• No accounts, emails, names or passwords
• No analytics or usage statistics
• No cookies of any kind
• No third-party trackers, ad networks or scripts
• No server-side storage of anything you do
• No AI prompts or chats sent to StudyBonk (API Mode talks directly to OpenAI with your key)

Local storage: what lives in your browser

StudyBonk saves your progress in your browser's local storage — a small amount of data written by the site itself, stored on your device, and readable only by StudyBonk in that browser. It is never transmitted anywhere, and if you never tell anyone, no one — including the site's creator — can see it. Here is the complete list of keys StudyBonk uses and what each one stores.

• sb.theme — your light or dark mode preference.
• sb.gamification — XP, level, streaks, badges and daily quest progress.
• sb.srs — spaced-repetition review schedules for your flashcards.
• sb.userDecks — custom flashcard decks you create or generate.
• sb.focusSettings — your focus timer configuration, such as session lengths.
• sb.focusStats — completed focus sessions and total study time.
• sb.ai.history.enc — your AI tutor chat history, stored encrypted.
• sb.ai.memory — short notes the AI tutor keeps to stay useful across chats.
• sb.devicekey — a locally generated key used to encrypt sensitive values like AI history.
• sb.api.enc — your OpenAI API key for optional AI features, stored encrypted.

The AI (optional, bring-your-own-key)

StudyBonk's AI features are optional. Instant Mode runs entirely in your browser with zero network activity. When you connect an OpenAI API key, requests are sent directly from your browser to OpenAI's API over HTTPS — StudyBonk has no server in between, receives nothing, and stores nothing.

Your API key is stored encrypted (AES-GCM) in your browser's local storage and can be deleted at any time from the AI page or by clearing site data. Your prompts become subject to OpenAI's privacy policy once they reach OpenAI's API.

• API key: stored encrypted locally (sb.api.enc), never sent to StudyBonk.
• Prompts: sent directly from your browser to OpenAI using your key.
• AI history: encrypted in local storage (sb.ai.history.enc) with a local key (sb.devicekey).

Children's privacy

StudyBonk is designed to be safe for students aged 13 and up, and the zero-collection architecture applies equally to younger visitors: the site collects no personal information from anyone, of any age, because it collects no information at all. There are no ads, no chat between users and no prompts asking children for personal details. As with any study tool, parents should still use common sense about screen time and content.

Your rights

Under privacy laws like GDPR and CCPA you have rights to access, export and delete your personal data. Because StudyBonk holds none of it, those rights are fully satisfied by you alone: you already have every byte.

• Export: download everything as a JSON file from the dashboard.
• Delete: clear StudyBonk's site data in your browser settings (see the Cookie-Free Notice for how).
• Move devices: export from the old device, import on the new one.
• There is no server-side copy to request or delete — there never was one.

Third parties

StudyBonk shares data with no third parties, because it has no data to share. There are no advertisers, analytics vendors, font CDNs or embedded social buttons. The only third party involved in operating the site is Cloudflare Pages, which statically hosts the pages and serves them from its edge network; Cloudflare serves files and never receives your study activity from StudyBonk. The AI model download described above comes from public model CDNs without any user data attached.

Changes to this policy

If StudyBonk's architecture ever changes in a way that affects privacy, this policy will be updated here with a new 'Last updated' date, and — because the site is open-source — the change will be visible in the repository's history before it ever reaches you. The commitment this page documents is architectural, not aspirational: no collection, by design.

Contact

Questions about this policy can be raised publicly on GitHub at github.com/TuffyCoder/StudyBonk — open an issue and the creator will respond. If you believe the site behaves in a way that contradicts this policy, please report it; verified privacy bugs are taken extremely seriously.

Last updated: 2026-09-06 · Questions? Open an issue on GitHub.