Privacy Policy

This privacy policy is short for a reason: StudyBonk's architecture makes most of it unnecessary. There are no accounts, no analytics, no cookies, no trackers and no server-side storage — so there is no database of user data to describe, protect or leak. The details below explain exactly what does exist and where it lives.

Summary: we collect nothing

StudyBonk does not collect, store, transmit or sell any personal data. When you study, the site cannot know who you are, what device you use beyond serving the page, or how you performed — because nothing about your activity is ever sent anywhere.

Most privacy policies explain how your data is handled. This one mostly explains why there is no data to handle: every feature that would normally require a server — progress, decks, gamification, the AI tutor — was engineered to run entirely in your browser instead.

What we do not collect

For the avoidance of doubt, here is the full inventory of what StudyBonk does not have. We run no analytics of any kind and keep no server logs of user activity beyond what Cloudflare's standard static hosting necessarily does at the network edge to serve pages (routing and denial-of-service protection, for example). Those infrastructure-level functions are operated by Cloudflare, not StudyBonk, and are not used to profile users.

• No accounts, emails, names or passwords
• No analytics or usage statistics
• No cookies of any kind
• No third-party trackers, ad networks or scripts
• No server-side storage of anything you do
• No AI prompts or chats sent to any server

Local storage: what lives in your browser

StudyBonk saves your progress in your browser's local storage — a small amount of data written by the site itself, stored on your device, and readable only by StudyBonk in that browser. It is never transmitted anywhere, and if you never tell anyone, no one — including the site's creator — can see it. Here is the complete list of keys StudyBonk uses and what each one stores.

• sb.theme — your light or dark mode preference.
• sb.gamification — XP, level, streaks, badges and daily quest progress.
• sb.srs — spaced-repetition review schedules for your flashcards.
• sb.userDecks — custom flashcard decks you create or generate.
• sb.focusSettings — your focus timer configuration, such as session lengths.
• sb.focusStats — completed focus sessions and total study time.
• sb.ai.history.enc — your AI tutor chat history, stored encrypted.
• sb.ai.memory — short notes the AI tutor keeps to stay useful across chats.
• sb.devicekey — a locally generated key used to encrypt sensitive values like AI history.

The local AI

StudyBonk's AI tutor runs entirely in your browser. Your prompts, questions and files are processed on your device and never leave it — there is no AI API, no server-side model and no chat log anywhere but your own machine. After the first load, the AI even works offline.

The single exception is the first time you enable the full model: the model weights are downloaded once from public model CDNs. This is the only external request the AI feature ever makes, and it contains no user data — it is functionally the same download any visitor of the CDN would make.

• Prompts and chats: processed on-device, never uploaded.
• AI history: encrypted in local storage (sb.ai.history.enc) with a local key (sb.devicekey).
• External requests: one-time model download from public CDNs, containing no user data.

Children's privacy

StudyBonk is designed to be safe for students aged 13 and up, and the zero-collection architecture applies equally to younger visitors: the site collects no personal information from anyone, of any age, because it collects no information at all. There are no ads, no chat between users and no prompts asking children for personal details. As with any study tool, parents should still use common sense about screen time and content.

Your rights

Under privacy laws like GDPR and CCPA you have rights to access, export and delete your personal data. Because StudyBonk holds none of it, those rights are fully satisfied by you alone: you already have every byte.

• Export: download everything as a JSON file from the dashboard.
• Delete: clear StudyBonk's site data in your browser settings (see the Cookie-Free Notice for how).
• Move devices: export from the old device, import on the new one.
• There is no server-side copy to request or delete — there never was one.

Third parties

StudyBonk shares data with no third parties, because it has no data to share. There are no advertisers, analytics vendors, font CDNs or embedded social buttons. The only third party involved in operating the site is Cloudflare Pages, which statically hosts the pages and serves them from its edge network; Cloudflare serves files and never receives your study activity from StudyBonk. The AI model download described above comes from public model CDNs without any user data attached.

Changes to this policy

If StudyBonk's architecture ever changes in a way that affects privacy, this policy will be updated here with a new 'Last updated' date, and — because the site is open-source — the change will be visible in the repository's history before it ever reaches you. The commitment this page documents is architectural, not aspirational: no collection, by design.

Contact

Questions about this policy can be raised publicly on GitHub at github.com/TuffyCoder/StudyBonk — open an issue and the creator will respond. If you believe the site behaves in a way that contradicts this policy, please report it; verified privacy bugs are taken extremely seriously.

Last updated: 2026-08-23 · Questions? Open an issue on GitHub.