Privacy Policy

Last updated: March 2026

The short version

leafcards does not collect, store, or sell your personal data. Your notes, cards, and stacks never leave your device unless you explicitly choose to sync them.

What we don't collect

leafcards is a client-side application. We operate no backend servers and maintain no user accounts. We do not collect:

Where your data lives

All content you create is stored locally in your browser's IndexedDB. It stays on your device and is never transmitted to us.

Google Drive sync (optional)

If you choose to connect Google Drive, your data is synced directly between your browser and your personal Google Drive account using Google's API. leafcards requests only the drive.file scope, which limits access to files created by the app. We never see, access, or store your Google credentials or your synced data.

Hosting and CDN

leafcards is hosted on Cloudflare Pages. As part of serving the site, Cloudflare may process standard connection data (IP addresses, browser type, page requests) at the network edge for security and performance. This data is governed by Cloudflare's Privacy Policy. Cloudflare does not use cookies or fingerprint visitors for analytics.

Third-party services

leafcards does not embed any third-party analytics, advertising, or tracking scripts. The only external service contacted is Google's API, and only when you initiate a Drive sync.

Children's privacy

leafcards does not knowingly collect any information from anyone, including children under 13.

Changes to this policy

If this policy changes, the updated version will be posted here with a new "last updated" date. Since we don't collect contact information, we can't notify you directly — please check back periodically.

Contact