Privacy Policy

Last updated: July 17, 2026

StudyItAll works without an account, and we collect as little as possible. This page describes everything the product actually does with your data.

Account data

Signing in is optional. If you do, you sign in with Google or GitHub (via NextAuth), and we receive your name, email address, and avatar from that provider. Your session is kept in an encrypted JWT cookie in your browser. We never see or store a password.

Learning progress

When you are signed in, we store your lesson completions, quiz scores, streaks, XP, and activity dates in Vercel KV, keyed by your account ID, so your progress follows you between devices. If you are not signed in, none of this is collected.

Payments

Paid plans are processed by Stripe. Your card details go directly to Stripe and never touch our servers — we receive only your Stripe customer ID, what you bought, and your subscription status, which we store to keep your access working. Stripe's handling of your payment data is covered by Stripe's privacy policy.

Analytics

We use Vercel Analytics to see anonymous, aggregate usage stats — which pages get visited and roughly how often. It does not build profiles of individual visitors.

Code you run

Python and JavaScript code executes entirely in your browser — it never leaves your machine. C++ and Java code is sent to third-party execution services (emkc.org and piston.codeutility.io) to be compiled and run. Because of that, do not paste secrets, passwords, API keys, or personal data into the code editor.

Email updates

If you give us your email address in a signup form, we store it with Resend (our email provider) and use it only to send StudyItAll content updates. Every email includes an unsubscribe link, and unsubscribing takes effect immediately. We never sell or share your address.

Cookies

We set a session cookie when you sign in and remember your light/dark theme preference. That's it — no advertising or tracking cookies.

Deleting your data

Want your account data gone? Email us via the contact page and we will delete it.