Privacy

Last updated 3 October 2026

chalk stores as little data as possible. There are no ads, no tracking pixels and no cross-site tracking, and no data is sold to anyone. Send questions or requests togarvwashere@gmail.com.

If you never sign in

No account exists and nothing that identifies you is stored. Your progress, review schedule, notes and settings live only in your browser's local storage. Clearing your browser data removes them. Anonymous usage and error reports (below) still apply. The hosting provider keeps short-lived request logs (IP address, browser, page) for security, as all web hosts do.

Usage and error reports

• Usage: PostHog records which pages are visited and which buttons are used. This shows me which parts of the site are useful. It runs without cookies and does not track you on other sites. Events stay anonymous even when you are signed in: they are never linked to your account.
• Errors: when something breaks in your browser, Sentry receives the error, the page, and your browser and system version so the problem can be fixed.

Neither is used for advertising or shared with anyone else.

If you sign in

• Account: your email address, name and profile picture, from the Google account you sign in with.
• Learning data: which lessons, boards and videos you finished, your review schedule, your margin notes and your reading position. These sync between your devices.
• Plan: which plan you have, when it started and when it renews.

One cookie keeps you signed in. It is used for nothing else, and chalk sets no other cookies. On the sign-in page, Google's button may set its own small cookie (g_state) that remembers whether you dismissed it.

If you buy a plan

Payment goes through Dodo Payments, the merchant of record. It collects your card details, billing address and country to charge you and to handle tax. I never see your card. Dodo sends chalk your email, the plan, the order number and whether the payment succeeded. That confirmation unlocks your account.

The pricing page and checkout use the country Cloudflare reports for your connection to pick the price and currency, so readers in India see rupee prices. It is read for that request and not stored.

Service providers

• Supabase: accounts, sign-in and the database for learning data.
• Cloudflare: hosts the site and serves videos, images and audio, and counts page views with its cookieless Web Analytics.
• Dodo Payments: payments, tax and invoices.
• PostHog: usage analytics, without cookies.
• Sentry: error reports.
• Google: sign-in. Only the sign-in page loads Google's button.

Each provider processes data only to deliver its part of the service. Some store data outside your country, including in the United States.

Retention

Account and learning data are kept until you delete your account. Usage events are kept for up to 12 months and error reports for up to 90 days. Dodo Payments keeps payment records for as long as tax law requires.

Your rights

You can request a copy of your data, ask for it to be corrected, or delete your account and everything stored with it. Deletion takes effect within 30 days and cannot be undone. An active yearly plan is cancelled with Dodo Payments first, so it never renews. Deleting an account does not refund a payment; see therefund policy for that. Email the address above for any of these requests. I will reply within 30 days.

Changes

If this policy changes what is stored or who stores it, a notice will appear on the site before the change takes effect. The date at the top always shows the latest version.