Privacy Policy

1. How We Handle Your Documents & Data

Depending on whether you use CramSheet as an unauthenticated guest or a signed-in user, your data is handled as follows:

• Guest / Offline Mode (Unauthenticated): Your Markdown notes, uploaded files, and custom styles are stored exclusively in your device's browser storage (IndexedDB database cramsheet_db_v2 and localStorage). In this mode, your documents are never uploaded to our servers or synced to the cloud. Document conversions (Word, Excel, PowerPoint, PDF) run 100% locally on your device via client-side WebAssembly (anydoc-wasm).
• Cloud Workspace Synchronization (Authenticated Users): When you choose to sign in with your Google account, CramSheet activates real-time two-way workspace synchronization via Google Cloud Firestore. Your private sheets, folder hierarchies, and bookmarks are securely stored in your isolated user partition (/users/{userId}/sheets and /users/{userId}). Access is strictly restricted by Firestore security rules so that only your authenticated account can read or modify your synced documents. You can delete synced sheets at any time directly in the Workspace Manager.
• Community Marketplace Publishing (Public): If you explicitly click "Publish to Marketplace", that specific sheet's title, description, and Markdown text are published to the public community collection (/sheets/{sheetId}) so students and professionals worldwide can view, clone, and print your study guide. You retain full authorship and can remove your community sheets at any time.
• Authentication Profile: When you authenticate with Google OAuth via Firebase Authentication, we receive your email address, display name, user ID, and avatar. We use this strictly to secure your cloud workspace partition and associate your bookmarks and community contributions. We never sell or share your profile with third parties.
• AI Studio Co-Pilot (When Explicitly Triggered): When you ask CramSheet AI Studio to restructure, compress, or generate cheatsheets, the prompt and text snippet are sent over encrypted TLS to Google Gemini API (or to your personal Bring-Your-Own-Key endpoint). If you enter a custom Gemini API key, it is encrypted and saved strictly in your local device storage.
• Anonymous System Telemetry: To identify rendering glitches, monitor print calibration reliability, and detect converter errors, the client emits non-identifiable event logs (event type, browser user-agent, session ID, and timestamp) to a protected Firestore telemetry collection. We do not use advertising trackers or cross-site tracking cookies.

2. Third-Party Service Providers

To deliver cloud synchronization and AI typesetting, CramSheet relies on trusted enterprise cloud infrastructure:

• Google Cloud Platform & Firebase: Provides Google OAuth authentication, static asset hosting, and Google Cloud Firestore for authenticated workspace cloud synchronization and public marketplace guides.
• Google Gemini AI API: Powers AI Studio for intelligent compaction, 1-page paper-budget fitting, and table synthesis.
• Jina AI Reader: Powers documentation URL imports, converting public web articles into clean Markdown over secure HTTPS.

3. Data Ownership, Export & Deletion

You retain 100% intellectual property ownership of all sheets, notes, and custom diagrams created in CramSheet. You can export your data at any time in standard formats (Markdown .md, high-resolution vector PDF, or JSON workspace backups). If you sign out or delete your documents, your local and cloud copies are removed.

4. Cookies & Tracking

CramSheet does not use third-party advertising cookies or behavioral ad tracking pixels. We use standard functional browser storage tokens strictly necessary to maintain your login session and local workspace state.

5. GDPR & CCPA Rights

Regardless of your geographic location, you have the right to:

• Access and export all documents and sheets associated with your account.
• Request permanent deletion of your account, published community sheets, and profile by emailing support.
• Opt out of cloud telemetry and use CramSheet 100% offline.

6. Contact & Maintainer Information

For inquiries, privacy questions, or data deletion requests, contact our engineering team at support@cramsheet.app or visit our open community repository at github.com/cramsheet/cramsheet.