Privacy in plain English

What is collected

If you leave a comment, the display name and the comment text you type are stored. No email address is requested, and your IP address is not kept as part of your comment. A short-lived, scrambled value derived from your connection is held for up to an hour purely to stop the form being spammed, and it is then deleted.

Why it is collected

Only so that comments can be reviewed and, if approved, shown on this page. Downloads never require an account, an email address or a payment, and anonymous download totals are counted per pack without recording who downloaded anything.

Downloads and anti-abuse

So that the public download totals stay honest, your browser stores a random anonymous identifier the first time you open a download. It is not linked to you, contains no personal information, and is used only to avoid counting the same browser twice for the same pack. Your browser settings can clear it at any time. A short-lived, scrambled value derived from your connection is also kept for up to an hour to limit automated bulk downloading, then deleted.

The same anonymous identifier is used when you give a comment a "+1", so that each browser counts once per comment. No name, email address or other detail is stored with it.

Downloads and the comment form also use Cloudflare Turnstile, a privacy-focused check that confirms you are a person rather than an automated script. It does not track you across websites and sets no advertising cookies.

What becomes public

Approved display names and comments are published on the homepage along with the month and year of submission. Please do not include personal details you would not want to be public.

Removing your comment

Email ciarankgh@gmail.com with the display name you used and it will be removed.

Members area (paid accounts)

Ciaran MacEochaidh (Ireland) is the data controller. If you create a members account, I process your email address and login details (to provide your account — contract), your membership status, your flashcard progress, question answers and any flags you send (to provide the service and fix errors — contract and legitimate interests). Payments are handled by Paddle.com, our Merchant of Record, which receives the data needed to sell the product, manage subscriptions, take payment, handle tax and issue invoices. I never see your card details.

When you tap "Explain Step-by-Step", the question and relevant pack text (not your personal details) are sent to an AI model through Lovable's AI service to write the explanation. Data may be processed outside the EEA by these providers under standard contractual safeguards. Account data is kept while your account exists and deleted or anonymised when it's no longer needed; Paddle keeps transaction records as tax law requires. I may share data with professional advisers or authorities where legally required.

Under GDPR you can ask to access, correct, delete, restrict or port your data, object to processing, or withdraw consent, and you can complain to the Irish Data Protection Commission. I'll respond within one month. Data is protected with encryption in transit and strict access controls.

Hosting and storage

The site, its database and the PDF files are hosted on Lovable Cloud, which also runs sign-in for members and the administrator. There is no advertising, remarketing, mailing list or non-essential analytics. Only essential sign-in storage is used for members, so no cookie banner is needed.

Contact

For any privacy or deletion request, email ciarankgh@gmail.com.