Privacy Policy

Last updated September 2026

Where your data lives

OpenDeck stores everything in your own ATproto repository. We do not run a database of your flashcards or progress and we do not sell or share your data since we never hold it. You can explore your public records on pdsls.dev.

Authentication

Sign in uses ATproto OAuth. Tokens are handled entirely in your browser and stored locally. OpenDeck never sees your password because you authenticate directly with your Personal Data Server.

What we read

To show your name and avatar, OpenDeck reads your public Bluesky profile. Account search uses the public AppView network. These are public ATproto endpoints.

The translations page shows the GitHub profile pictures of the people who checked a translation. Your browser loads them directly from GitHub, which can see your IP address when it does.

Local storage

For offline use and speed, OpenDeck stores your decks, cards, progress, study sessions and profile in your browser, along with images and audio for the decks you keep offline. So you stay signed in without a connection, it also remembers your account's DID and handle. Small preferences like your theme are kept in local storage. This data stays on your device and can be cleared at any time.

Notifications

Study reminders are push notifications and are only sent if you grant notification permission. So they arrive even while OpenDeck is closed, our server (hosted on Netlify) stores your device's push address, your DID, your time zone and the reminder text, and reads your reminder hour and days from your public OpenDeck profile. Turning reminders off, signing out or deleting your data removes all of this information. No study data is involved.

Analytics

OpenDeck ships without third party tracking or advertising.