Privacy Policy

Everything you create with the tools (subjects, study sessions, notes, plans, goals and settings) is saved in your browser’s own storage on the device you are using. Without an account it is not sent to our servers, so we can’t see it, change it or get it back for you. Your theme choice is saved the same way, and so, if you sign in, are a note that this browser is signed in and what it has already synced (with no address and no name). If you sign in, see section 2 for what we keep.

• You can export your data to a file at any time. The file is saved on your device; we never receive it.
• You can delete it with “Delete all data” in the tools, or by clearing this site’s data in your browser settings. If you are signed in, “Delete all data” deletes it from your account and your other devices too; your settings stay.
• Your browser may delete it too: private windows forget it when you close them, and some browsers, like Safari, may clear it if you don’t visit for a while. Export a backup now and then.

Signing in is optional. It gives you Study Tally Pro in early access, free for now: your log, plans and settings sync between the devices where you sign in. You can sign in with a link and a code that we email you, or with Google. There is no password. Accounts are for ages 16 and up: you confirm it, and that you agree to this policy, when you sign in.

For your account we store:

• your email address;
• your name from your Google account and your Google ID, only if you sign in with Google;
• the language of the site you last signed in from, so that our emails are in that language;
• when you created the account, confirmed your email address, confirmed you are 16 or older and agreed to this policy, last signed in and last synced;
• your synced study data: subjects, study sessions with their notes, planner blocks, homework, exam plans, goals and settings, as you created them in the tools. We use it only to sync it back to you; we don’t read it, analyze it or share it. The settings of a device, like light or dark mode, stay on that device.

Where and for how long. Your account and your synced data are stored on our server in the United Kingdom (OVHcloud, London). We keep them until you delete your account. We don’t delete accounts for being inactive. An account holds up to 50 MB of synced data; past that, new data stays only in the browser where you made it.

Going back in time. We keep every version of your synced records for 90 days. On the Account page you can bring them all back to how they were at any moment in that time; this changes them on all your devices. Versions older than 90 days are folded into the last one.

Deleted records. When you delete something, like a session or a homework item, we keep it in full for 90 days after the deletion reaches our server, so that you can still bring it back. After that, only its ID and three dates remain (when it was created, last changed and deleted), so that your other devices delete it too; our daily cleanup does this within a day. Deleted subjects are the exception: their name and color stay as long as your account does, because the sessions in your log still show them.

Deleting your account. You can delete your account at any time on the Account page. It is deleted at once and entirely: your synced data with all its versions, your sign-in on every device, and any early access requests and sign-in emails for the same address. The data in your browsers stays there until you delete it. You can also email hello@studytally.com from the address of your account and we will delete it for you.

The sign-in cookie. When you sign in, the site sets one cookie that keeps you signed in on that browser. It is needed for the account to work, so we don’t ask for consent to it. It lasts 30 days after your last visit, and signing out removes it. Pressing “Continue with Google” sets it too, to finish that sign-in; if you don’t finish, we delete that unfinished sign-in within two days. Asking for a sign-in email sets no cookie. The pages of the tools never set it, and they look the same whether you are signed in or not. The session behind the cookie doesn’t store your IP address or details about your browser.

Signing in by email. When you ask for a sign-in email, we store your address, scrambled (hashed) forms of the link and the code, the language of the page and the page to come back to. The link and the code work once, for 15 minutes; the request is deleted within two days after that. To limit repeated attempts, the server keeps scrambled codes made from your network address and your email address, deleted within two days.

Who helps us. Our emails are sent through Mailjet (France), which handles your address and the email only on our behalf and keeps its data in the EU. We have turned off its tracking: our emails don’t record whether you open them or click their links. If you sign in with Google, Google handles that sign-in under its own privacy policy. It tells us your email address, your name, a link to your profile picture and your Google ID; we keep the address, the name and the ID, not the picture, and we ask for nothing else from your Google account. Like every page, the requests of your account, with your email address and your synced data, reach our server through our network provider, Cloudflare.

Some Pro features, like weekly reports, open in early access later. (Sync is already in early access: you get it by signing in, see section 2.) If you ask for an early access invitation, we store:

• your email address;
• which feature you asked about and the page you asked from;
• that you confirmed you are 16 or older and agreed to this policy, and when.

We don’t store your name, your IP address or details about your device with it.

We use your address for one thing: to email you once with your invitation when early access to that feature opens. We won’t add you to a newsletter, sell your address or share it for marketing. We send that email through Mailjet (see section 2). Once we have sent it, we delete your address from the list for that feature.

To have your address deleted sooner, email hello@studytally.com from that address and we will remove it.

To see which pages and tools people find useful, we count visits with Umami, an open-source analytics tool. It runs on our own server and loads from our own domain. It doesn’t use cookies and doesn’t follow you to other sites. We don’t share this data or sell it.

When you open a page, it records:

• the address of the page and the site or page that sent you there (the referrer);
• your browser, operating system and type of device, plus your screen size and language;
• your country, which our network provider, Cloudflare, works out from your IP address;
• actions from a short list we chose, like starting a timer, exporting your data or changing the theme, sometimes with a simple detail, such as which theme you picked;
• how you got here: the tags on the link that brought you (utm and ref), the first such source this browser saw and the month it was first seen, on how many days this browser has opened the site (as a range), whether the site runs as an installed app or inside another app, your time zone, the kind of network connection and a rough class of your device;
• a rough size of what you keep in this browser: on how many days you have study sessions, how many subjects you have and whether you have a plan, as ranges, never their contents.

The first source and the count of days are remembered in your browser’s storage, like your settings, so that a later visit can be attributed to them; nothing about you is stored on our side.

Signing in doesn’t change this: the counts never include your email address, your name or anything that links them to your account. Among the actions, we count asking for a sign-in email, signing in and signing out, whether by email or with Google, and whether you add a browser’s data to your account or keep it separate. With each visit, we also note whether you are signed in and, if you are, on how many browsers: one, two, or three or more.

Your IP address isn’t saved. To tell visits apart without cookies, Umami turns your IP address and browser details into a scrambled code that changes every month.

If your browser sends a Do Not Track signal, we don’t count your visits at all.

We keep these statistics for as long as we run Study Tally. They don’t include your name, your email address or your IP address.

Like every website, our server receives your IP address and basic browser details when you load a page. We use them only to deliver the site and keep it safe. Our hosting and network providers process the same details to deliver pages.

• Request log. For each request, our server notes the time, the page address, the response, your browser and the page you came from. Your IP address is shortened first: 203.0.113.42 is saved as 203.0.113.0, and an IPv6 address keeps only its first two blocks.
• Error logs. When something breaks, the server notes what went wrong. These notes can include your full IP address, but not your email address.
• Spam protection. The email form and the sign-in keep scrambled (hashed) codes made from your network address, not the address itself, to limit repeated requests. They are deleted within two days.

The request log and error logs are deleted automatically after about two weeks.

Study Tally shows no ads and has no social media pixels or third-party analytics. Pages don’t load scripts from other companies, and fonts are served from our own domain. We don’t sell or share your personal information.

Study Tally is meant for students 13 and older. Anyone can use the tools without giving us personal information. If you are under 16, please don’t send us your email address or create an account. If you believe someone under 16 has given us their email or created an account, write to hello@studytally.com and we will delete it.

• Your study data: see it, export it or delete it yourself, at any time, in your browser.
• Your account: see your address on the Account page, download all the data in your account as a file, or delete the account with everything in it, at any time.
• Your email: ask us what we hold about you, or ask us to delete it, at hello@studytally.com.
• Depending on where you live, laws such as the CCPA in California or the GDPR in the EU and UK may give you more rights. Write to us and we will help.

If we change how we handle data, for example when Pro becomes paid, we will update this page and the date at the top before the change takes effect.

Questions about privacy: hello@studytally.com.