US · Privacy

Privacy — United States

Caselaw operates under the California Consumer Privacy Act 2018 (CCPA) as amended by the California Privacy Rights Act 2020 (CPRA), plus applicable state privacy laws (VCDPA, CPA, CTDPA, UCPA) for United States users. Data residency: Supabase EU-WEST (Frankfurt) — cross-border transfer disclosed; Standard Contractual Clauses on file. Privacy regulator: California Privacy Protection Agency (CPPA).

We do not sell personal information and do not share it for cross-context behavioral advertising — there is no "Do Not Sell or Share" opt-out to action because the activity never occurs.
California residents have rights to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and non-discrimination — exercise via [email protected].
We do not knowingly collect personal information from children under 13 (COPPA) or sell information about consumers under 16 (CCPA).
Sales tax applied per-state via Stripe Tax where economic nexus exists.

What we collect

Email address (account, magic-link auth, transactional comms)
University / year-level / exam-focus (only what you give us in the waitlist or settings)
Salted IP hash for abuse prevention (never raw IP)
Reading history within Caselaw — used to drive flashcards and revision suggestions; never sold
Stripe customer / subscription state (via Stripe; we do not store payment card data)

What we don't collect

Tracking cookies that follow you off the site
Third-party advertising profiles
Card numbers (Stripe processes them — we never see them)
Voice / video / camera data — we have none of those features

Your rights

Access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability and the right to object — all exercisable by emailing [email protected]. We respond within 30 days. If you're not satisfied, you can lodge a complaint with the California Privacy Protection Agency (CPPA).

This regional privacy notice supplements our global privacy policy — read both. Effective 2026-05-01.

Privacy — United States

We do not sell personal information and do not share it for cross-context behavioral advertising — there is no "Do Not Sell or Share" opt-out to action because the activity never occurs.

California residents have rights to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and non-discrimination — exercise via [email protected].

We do not knowingly collect personal information from children under 13 (COPPA) or sell information about consumers under 16 (CCPA).

Sales tax applied per-state via Stripe Tax where economic nexus exists.

What we collect

Email address (account, magic-link auth, transactional comms)

University / year-level / exam-focus (only what you give us in the waitlist or settings)

Salted IP hash for abuse prevention (never raw IP)

Reading history within Caselaw — used to drive flashcards and revision suggestions; never sold

Stripe customer / subscription state (via Stripe; we do not store payment card data)

Your rights

This regional privacy notice supplements our global privacy policy — read both. Effective 2026-05-01.