Privacy Policy
Last updated: August 2026
The short version
Gnoseed is a browser-based learning app with no mandatory account. Everything you need to study is kept in your own browser. Analytics runs without cookies unless you allow them, and you can change that choice any time. We don't sell your data, and there are no ads.
What we store on your device
The following are strictly necessary for the app to function. They stay in your browser's localStorage (and are exempt from the cookie choice below). Clearing your browser data removes them.
| Stored item | Why |
|---|---|
| gnoseed.state.v1 | Your learning progress, streak, settings, profile and stats. |
| gnoseed.theme | Your light / dark / system colour-mode preference. |
| gnoseed.consent.v1 | Your cookie choice, so we don't ask again. Set by this policy. |
| gnoseed.content.v1 / gnoseed.cards.v2 / gnoseed.cardrevs.v1 / gnoseed.archived.v1 | A local cache of quiz decks (their content versions and which are archived) so the app works offline, loads fast, and refreshes when a question is corrected. |
| gnoseed.sync.uid | Links your device to your account for cross-device sync (only when signed in). |
| gnoseed.installDismissed | Remembers that you dismissed the "install app" prompt. |
| Supabase auth session (sb-…-auth-token) | Keeps you signed in across visits — only present if you create an account. |
Analytics (cookieless by default — cookies only with your consent)
We use Google Analytics (gtag.js) to understand which topics and pages are used, so we can improve the app. It runs under Google Consent Mode v2: until you choose, and permanently if you decline, it operates in a cookieless mode — it stores no cookies and no identifiers in your browser, and reports only an aggregate, non-identifying signal that a page was viewed. Only if you choose "Accept all" or enable Analytics in the cookie banner does it store analytics cookies and measure your visit as a session. In both modes usage data (including your IP address) is processed on Google's infrastructure. Advertising and personalization signals are disabled at all times, regardless of your choice. You can change your choice at any time via Withdrawing consent takes effect immediately — measurement drops back to the cookieless mode without needing a reload.
Accounts & cross-device sync
An account is optional. If you sign in, authentication and progress sync are handled by Supabase (Postgres, Auth). Your email and learning progress are stored there so your streak, settings and card history follow you across devices. Your session token is kept in your browser to keep you signed in. Delete your account to remove this data; without an account, nothing leaves your device.
Third-party requests
- Google Fonts — we load the "Plus Jakarta Sans" web font from Google's font CDN (
fonts.googleapis.com/fonts.gstatic.com). This is a styling request; it sets no cookies, but Google receives the request (including your IP address) to serve the font file. - Supabase — only contacted if you sign in or your device syncs (see above).
- Google Analytics — cookieless by default, with cookies only if you consent (see above).
- Rollbar — error tracking. When something in the app crashes, a report is sent to Rollbar so the bug can be found and fixed: the error message and stack trace, the page you were on, your browser and its version, and recent app activity (page changes, network requests, console messages). If you are signed in, your account ID is attached so repeated reports can be told apart — never your email or name. Form input is scrubbed, and no recording of your screen or session takes place. This is operational, not measurement, so it runs regardless of your analytics choice.
Your choices
You control non-essential storage. Update your cookie preferences at any time:
Contact
Questions about your data? Email tomas.chudjak@gmail.com.