Privacy Policy

If you have any questions about our privacy practices, please don't hesitate to reach out to us at support@2anki.net.

Data Processing

Some file handling occurs on external servers to reduce browser overhead. Failed conversions are logged in the server error log (no file contents), but your uploaded files are not stored or emailed anywhere unless you opt in via the Share files when a conversion fails setting on the /debug page. When that opt-in is on, the uploaded files and error details are sent to the 2anki team so we can reproduce the issue.

If you accidentally upload sensitive information, contact us and we'll delete the server logs.

We log IP addresses for research purposes. If you sign in with Google, we also store your email address and name, as described below. We don't collect or harvest any other personally identifiable information.

The source code is available at 2anki/server.

Signing in with Google and Google Drive

Sign in with Google

When you sign in with Google, we read your email address and name from your Google account. We use your email to identify your account and sign you in, and your name to show who is signed in. We store both with your 2anki account and mark your email as verified. We don't read or store your Google profile picture, we don't share this data with anyone, and we never use it for advertising.

Google Drive

When you pick a file with the Google Drive picker, 2anki uses the drive.file permission. It gives us access only to the files you choose in the picker, never the rest of your Drive. We read the file once, build your deck from it, and send the deck straight back. The working copy is deleted automatically, normally within 4 hours, the same as any other upload, and we don't keep your Drive access token afterward.

We do keep a short record of the files you picked (the file's name, type, size and a link back to it in your Drive) in your account, so you can convert them again from your upload list. You can remove any entry from that list at any time, and the whole list is removed when you delete your account.

You can review or revoke 2anki's access to your Google account and Drive at any time at myaccount.google.com/permissions.

2anki's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. That policy is published at https://developers.google.com/terms/api-services-user-data-policy.

Cookies

Necessary cookies keep you signed in and remember choices you made on this site; they are always set. In the EEA, the UK and Switzerland, analytics and advertising cookies are set only after you accept them in the cookie banner. Elsewhere they are on by default. You can change that choice any time under Account, and choosing Only necessary removes the analytics and advertising cookies already set.

With advertising cookies allowed we also tell Google Ads when a visit that started from one of our ads leads to a sign-up or a purchase (amount, currency and an order reference, and, for signed-in users, a hashed email address Google uses to match the conversion). We never share the content of your notes or decks.

When a link to 2anki carries campaign tags (utm_source, utm_medium, utm_campaign, utm_term), we record them on the page view and, if you buy in the same visit, on the payment record and in our purchase analytics, whatever your cookie choice. These tags name the campaign and keyword the link was made for, not you. They are kept in the page's memory only, never in a cookie, and the Google click id stays under the advertising cookie above.

With analytics cookies allowed we also send Google Analytics a record from our own servers when you sign up or make a purchase, tagged with the Google Analytics identifiers already stored in those cookies so Google can match it to your visit. For a sign-up we include how you signed up (for example with Google, or with an email and password); for a purchase we include the amount, the currency, and an order reference. We never send your name, your email, or the content of your notes or decks.

Data Retention

We keep your data only as long as the feature that uses it needs it. A cleanup runs once a day and deletes what has expired. You can delete your decks and chats yourself at any time, and deleting your account removes the data tied to it, apart from the few records listed below.

Deleting your account

You can delete your account at any time on the Delete account page. We cancel any active subscription first, then delete your account and the data tied to it straight away: your decks, conversion history, settings, templates, Notion and Google Drive connections, chat conversations and attachments, and AI assistant connections. Stored deck files are removed from storage in the daily cleanup, normally within 2 days.

Afterwards we keep only:

• a one-way hash of your email address with that month's usage counts, so deleting and re-creating an account doesn't reset the free monthly limit
• a one-way hash of your email address if our emails to it bounced, were reported as spam or were unsubscribed from, so we don't email it again
• records of passes bought without an account (the payment reference and a one-way hash of the buyer's email address)
• usage events and error reports, unlinked from you
• payment records held by Stripe

Service Providers