Privacy policy

This policy covers the website memorito.app: the free tools, guides, courses, exercises and the chill room.

Who is responsible

The controller of personal data processed on this site is MartinSoft, Stanisława Taczaka 24/103 61-819 Poznań. For questions and requests, write to support@memorito.app.

In short

You can use almost all of the site without an account, and there are no forms to fill in. You only need an account for the AI tools: the flashcard and quiz generator, the summary generator, the recall check and the “Run with Rito” game.
The site shows no ads. We only set cookies once you sign in, to keep you signed in.
What you type into the calculators, the timer and the other tools stays in your browser - we never receive it. The exception is the AI tools: the text you paste goes to an AI model, but we don’t store it on our servers.
We count visits without cookies and without identifying you.

Data in your browser

The site remembers a few settings in your browser’s storage (local storage and session storage), so they are still there on your next visit. They never leave your device and we cannot see them. You can delete them at any time by clearing this site’s data in your browser settings.

Key	What it remembers
`memorito-theme`	light or dark theme
`memorito-locale`	the language you picked (and that you closed the language hint)
`memorito-chill-room`	the chill room wallpaper
`memorito-chill-room:sound`	chill room sound levels and volume
`memorito-tools:grade-calculator`	grades typed into the grade calculator (Polish version)
`memorito-tools:weighted-grade-calculator`	scores typed into the weighted grade calculator
`memorito-study-timer`	study timer settings and the current block
`memorito-study-timer:today`	today’s number of focus blocks and minutes
`memorito-account`	that this device signed in to the AI tools, now or before, so the top bar shows the account menu or a way back to your flashcards (the session itself is a cookie; deleting the account removes this too)
`memorito-tools:ai-sources`	the texts your AI flashcard sets were made from (the latest 30), so a set can be made again; removed when you sign out or delete the set
`memorito-tools:ai-draft`	the text pasted into the AI flashcard generator, only until you close the tab (sessionStorage)
`memorito-tools:handoff`	the text the Memorito Chrome extension hands to a page of the site; the page removes it as soon as it has read it (sessionStorage)
`memorito-tools:ai-summary`	the text pasted into the AI summary generator, until it is summarised or you close the tab (sessionStorage)
`memorito-tools:ai-recall`	the text you test yourself on in the recall check, its key points, your answer and the result, only until you close the tab (sessionStorage)
`memorito-tools:rito-run`	your best score in “Run with Rito” for each flashcard set (the set’s ID - or the code of a shared set’s link - and a number); removed when you delete your account in this browser
`memorito-tools:rito-run-settings`	the settings of “Run with Rito”: calm mode, the simple look and the sounds, on or off

Your account and the AI tools

The AI tools - the flashcard and quiz generator, the summary generator, the recall check and the “Run with Rito” game - only work when you are signed in. We then process:

Your email address - so that you can sign in. If you sign in with Google, Google sends us your email address, name and profile picture, but we only store the email address. We don’t store tokens for your Google account either.
The sign-in code - 6 digits, valid for 10 minutes. We only store it as a hash, from which the code cannot be read, and delete it once it has been used or has expired.
Your session - once you sign in, your browser gets the cookies __Secure-memorito.session_token and __Secure-memorito.session_data with a session ID. They last 30 days or until you sign out. Signing in doesn’t work without them, which is why we don’t ask for consent to them. When you sign in with Google, we also set a cookie for a few minutes that protects the sign-in against being hijacked.
The text you paste into an AI tool (or load from a PDF - we read the file itself in your browser and don’t send it anywhere) - we send it to an AI model, which turns it into flashcards and questions, a summary or the key points to check what you remember, and we don’t store it on our servers. It stays only in your browser (see the table above): the text of a flashcard set on this device, so that the set can be made again, until you sign out or delete the set or your account; the text you summarise or test yourself on only until you close the browser tab. The model runs on Cloudflare Workers AI. Cloudflare states that it doesn’t use content processed there to train AI models and doesn’t retain prompts or responses once they are no longer needed to handle the request. Please don’t paste personal data - your own or anyone else’s.
Your sets - the title, the flashcards and the questions with short quotes from your text, plus the date they were created, the page language, the length of the text, the name of the AI model used and the number of tokens processed (we need these for the daily limits and to keep costs under control). We keep them until you delete the set or your account.
Your summaries - the title, the main idea and the key points with short quotes from your text, plus the date they were created, the page language, the length of the text, the name of the AI model used and the number of tokens processed (for the daily limits and to keep costs under control). We keep them until you delete the summary or your account. When you delete a summary, only a record that it was made remains (the date, the page language, the length of the text, the model and the tokens), for the daily limit; we delete it after 30 days, or straight away together with your account.
The recall check - we send your answer, like the text, to an AI model and don’t store it on our servers. The text, its key points, your answer and the result stay only in the browser tab, until you close it. All we record is an entry for each text you check: the date, the page language, the length of the text, the number of checks, the name of the AI model used and the number of tokens processed (for the daily limits and to keep costs under control). We delete it after 30 days, or straight away together with your account.
“Run with Rito” - the game uses your sets and sends nothing to an AI model. We don’t store your games on our servers; your best score for each set stays only in your browser (see the table above). A new set made from a text in the game is an ordinary flashcard set (see above).
Shared sets and summaries - if you share a set or a summary by link, anyone who has it sees the title and the content - the flashcards and questions, or the main idea and the key points with short quotes - but not your email address, and can save a copy to their account. Those copies stay in their accounts even if you stop sharing or delete the set or summary. We store nothing about the people who open the link - we only count how often it was opened and how many copies were saved. A shared set can also be opened as the game “Run with Rito”, on the same terms.
Your IP address - to stop anyone from sending codes in bulk or getting around the limits, we count requests from each IP address. Entries with an IP address are deleted automatically no later than two hours after the last request.

Legal bases: your account, signing in, the AI tools, your sets, summaries and records of checks - performing our agreement with you for the use of the AI tools (Art. 6(1)(b) GDPR); protection against abuse - our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).

We send sign-in codes through Cloudflare Email Service. We keep server error messages for up to 7 days so that we can fix problems. The “Delete account” button in the “Account” menu at the top of the page immediately deletes your account together with its sessions, sets, summaries and records of checks.

The Chrome extension

If you use the Memorito extension for Chrome:

The extension reads a page only when you pick a Memorito item from the right-click menu on it. It doesn’t track the pages you visit and has no standing access to them.
On a YouTube video’s page, “Add video transcript to Memorito” (and “Add this page to Memorito”) opens the transcript panel under the video - just like the “Show transcript” button - and reads its text alone, without the timestamps. From then on, the transcript is treated like any other passage you collect.
The passages you add to your collection are kept, together with the title and address of the page they come from, only in the extension’s storage in your browser (chrome.storage.local) - until you delete them or uninstall the extension. They don’t reach us.
If you pick a language in the extension’s panel, the extension keeps it in the same storage. It sets the panel’s text, the right-click menu and the language version of memorito.app that the extension opens.
Only when you click “Summary”, “Flashcards”, “Quiz” or “Game with Rito” does the extension open memorito.app in a new tab and hand it the text of the passages alone, without page titles or addresses (memorito-tools:handoff in the table under “Data in your browser”). From then on, that text is treated just like text pasted on memorito.app (see above), and you sign in on the site.
To show how many AI generations you have left today, the extension’s panel asks memorito.app about your account. Your browser adds the site’s session cookie to that request, just as it does on memorito.app. The extension doesn’t sign in by itself, can’t see that cookie and doesn’t store anything from the answer.

Hosting

The site, the AI tools and the account database are provided by Cloudflare, Inc. To deliver the pages and protect the site against attacks, Cloudflare processes technical data such as your IP address, browser type and the address of the requested page, and may set a strictly necessary security cookie when it suspects automated traffic. The legal basis is our legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR). Account data, sets, summaries, the AI model and the sending of sign-in codes also run on Cloudflare, which processes them on our behalf. Cloudflare may process data outside the European Economic Area; it takes part in the EU-US Data Privacy Framework.

If you sign in with Google, Google processes the data of your Google account as a separate controller, under its own privacy policy.

Visit statistics

We use Cloudflare Web Analytics to see how many people visit which pages and where they come from (country, referring website). It uses no cookies, does not follow you across websites and does not identify you. The legal basis is our legitimate interest in knowing which content is useful (Art. 6(1)(f) GDPR).

Links and resources

This site loads its fonts, scripts and sounds from its own server (apart from the statistics script described above).

Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (UODO). You can delete your account yourself in the “Account” menu, your sets on the “Your flashcards” page and your summaries on the “Your summaries” page. If you don’t have an account, the site doesn’t identify you, so we usually hold no data that can be linked to you; write to us and we will check.

Changes

We update this policy when the site changes. The date below shows the current version.