Mafsar — Privacy Policy

Last updated: August 17, 2026

Mafsar is a browser extension that turns your learning sessions (AI chats, articles, or any page you capture) into flashcards, quizzes, and spaced-repetition study material. This page explains what data the extension and its backend collect, how it's used, and how to delete it.

What we collect

• Account info: if you register, your email address and a bcrypt-hashed password. We never store your password in plain text.
• Study content: captured page/chat text, generated flashcards and quiz questions, review history (grades, intervals), exam dates, and study-set titles.
• Usage metadata: timestamps of when sets and cards were created or reviewed, used only to schedule spaced-repetition reviews and compute your study streak.

By default, Mafsar works fully offline using your browser's local storage. An account is only needed if you want automatic flashcard/quiz generation or to sync data across devices.

How captured text is processed

When you capture a page, chat, or selection and ask Mafsar to generate flashcards or a quiz, that text is sent to our backend, which forwards it to a third-party AI model provider (currently Google Gemini, Groq, or Anthropic, depending on server configuration) solely to generate study material. That text is not used to train models, and we do not share it for advertising or analytics.

Where data is stored

Account and synced study data is stored in a hosted SQLite database (Turso) accessed by our backend (hosted on Railway). Data is transmitted over HTTPS. If you never create an account, your data stays only in your browser's local storage and is never sent to us.

What we don't do

• We don't sell or share your data with advertisers.
• We don't run analytics or tracking scripts in the extension.
• We don't read your AI chats or browsing activity outside of content you explicitly choose to capture.

Data deletion

You can delete individual study sets and cards at any time from the extension. To delete your account and all associated server-side data, email sardoralien@gmail.com from the account's registered address and we'll remove it within 7 days.

Children's privacy

Mafsar is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, the "Last updated" date above will change. Material changes will be reflected here before taking effect.

Contact

Questions about this policy or your data: sardoralien@gmail.com