Last updated November 6, 2026
Comfy cards keeps the minimum it needs to run your account: your email, a hashed password and the decks you create. We do not sell your data, show ads or share it with anyone for marketing.
You can use the app as a guest without giving us anything at all. Guest decks live only in your browser tab and disappear when you close it.
Account: your email address and your password, which is stored only as a bcrypt hash and never in plain text.
Learning data: the decks and cards you create or add from the catalogue, including words, translations and transcriptions, and your review history, which is how we know which cards are due.
On your device: a sign-in token, valid for 30 days, your theme choice and your cookie choice, kept in your browser's local storage.
Signing in, your theme and your cookie choice are strictly necessary for the app to work and are stored without asking.
We may use an analytics service to understand how many people visit and which pages they use. It runs only if you accept it in the cookie banner. If you decline, no analytics scripts are loaded. You can change your choice at any time through the Cookie settings link at the bottom of the page.
We use your email and password to let you sign in, and your decks and review history to show you your cards and schedule repetitions. This is necessary to provide the service you signed up for.
Analytics data, if you allow it, is used only to improve the app, based on your consent.
The app and its database are hosted by Railway, a cloud hosting provider. Domain and DNS are handled by Cloudflare. These providers process data on our behalf and their servers may be located outside your country.
Your account data is kept while your account exists. When an account is deleted, its decks, cards and review history are deleted with it.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything in it. Write to the address below from the email you signed up with and we will reply within 30 days.
If you are in the EU, the UK or another region with data protection law, you also have the right to complain to your local data protection authority.
Comfy cards is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
If we change this policy, we will update the date at the top of this page. For significant changes we will let account holders know by email.