Privacy
What we keep, and what we don’t
Last updated 17 October 2026.
No account, no email
We never ask for a name, email address or password.
Your practice card
A card is a random 32-character key. We store only a one-way hash (SHA-256) of it, so the key itself is not in our database. The key lives in a cookie in your browser and in the private link you copy. For each shortcut the card keeps its box, the date it is due again and how many times you got it right or wrong; for each day, how many shortcuts you answered, how many were right and how long they took. The drill never sends or stores what you type: it sends only right or wrong and the time taken.
Cookies
Three, all first-party: the card key (if you start or open a card), your keyboard choice (Windows or Mac) and a security token for forms. No analytics services, no tracking cookies, no fonts from other sites. The only outside service the pages load is the AdEngine banner on the public pages, described under Advertising; it also counts one page view per page as a daily total.
Advertising
The public pages (home, the deck lists, pricing, about and sources) show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services. A drill, your practice card, the cheat sheets, this page and the terms never show an ad.
To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site with those requests. Nothing from your practice card is sent with them.
- No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
- How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
- What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
- Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
- Nothing about you is sold or shared.
Addresses and logs
Daily limits count a salted hash of your IP address, kept for two days. The web server keeps ordinary access logs for security. Database backups, including the copies made each time we update the site, are deleted after 14 days.
Deleting
Open your card and choose “Delete this card”: the card and all its progress are removed at once (copies in database backups are deleted within 14 days).