Privacy Policy

Last updated September 2026

Where your data lives

OpenDeck stores everything in your own ATproto repository. We do not run a database of your flashcards or progress and we do not sell or share your data since we never hold it. You can explore your public records on pdsls.dev.

Authentication

Sign in uses ATproto OAuth. Tokens are handled entirely in your browser and stored locally. OpenDeck never sees your password because you authenticate directly with your Personal Data Server.

What we read

To show your name and avatar, OpenDeck reads your public Bluesky profile. Account search uses the public AppView network. These are public ATproto endpoints.

Local storage

For offline support and speed, OpenDeck caches decks, cards and progress in your browser. It also remembers small preferences like your theme in local storage. This data stays on your device and can be cleared at any time.

Notifications

Study reminders are scheduled locally by your browser and only fire if you grant notification permission. No push server is involved and no reminder data leaves your device.

Analytics

OpenDeck ships without third party tracking or advertising.