Privacy Policy
Stego · Last updated 10 September 2026
Stego works fully offline and asks for nothing. There is no analytics, no advertising, and no tracking of any kind. A sync account is optional, and without one nothing ever leaves your device.
What Stego stores
The decks and cards you create are saved on your own device. If you never create a sync account, that is the only place they exist, and the developer has no ability to see your decks, your study activity, or your test results.
Sync accounts
You may optionally create an account so your decks are available on your other devices. Every feature of Stego works without one. You must be at least 13 to create one.
If you create an account, the following is stored on the sync server:
- The username you choose. No email address is requested or required.
- Your password, which is stored only as a salted hash. Neither the developer nor anyone else can read it. This also means it cannot be reset or recovered.
- Your decks, cards and study progress.
- Your appearance choices, but only while Sync theme is turned on for that device.
- The usernames you have blocked, so those blocks keep working.
This data is used only to run the app: showing you your own decks on your own devices, delivering a deck to someone you choose to send it to, and reviewing a deck that has been reported. It is never used for advertising, never profiled, and never sold or disclosed to anyone else. It is stored on infrastructure operated by Supabase, which acts as the hosting provider.
Sending and receiving decks
If you send a deck to another Stego user, that deck and your username are stored on the sync server until they accept or reject it. If someone sends you a deck, it waits in your inbox and is never added to your library unless you choose to add it.
You can block any user from sending you decks, and you can report a deck you consider abusive. A report sends the deck and the sender's username to the developer for review, and is kept only as long as needed to act on it. Blocks and reports are managed in the app under the inbox.
Deleting your account
You can delete your account at any time from Settings › Sync. Deleting it permanently erases the account and everything stored with it from the server, including anything still waiting in your inbox. The decks on your device are kept, so nothing is lost locally.
iCloud
On iPhone and iPad, Stego can save your decks to your own private iCloud container so they stay in step across your Apple devices. This is separate from a sync account and needs no account of ours. The Mac version does not use iCloud. That data belongs to you and lives in your personal Apple account. The developer cannot access it. Apple's handling of it is governed by Apple's Privacy Policy. If you prefer not to use iCloud, Stego keeps everything on the device instead.
Files you export
Exporting a deck writes a JSON file to a location you choose. That file is yours. Stego neither uploads it nor keeps a copy.
Data sharing
None. Nothing is ever sold, shared, or disclosed to anyone. The only third party involved at all is the hosting provider that runs the sync server, and only if you choose to create an account.
Analytics and tracking
Stego contains no analytics frameworks, no advertising identifiers, and no tracking technologies. It never tracks you across apps or websites. Without a sync account it makes no network requests at all. With one, it contacts the sync server only to send and receive your own decks.
Children
Stego can be used on a device by anyone of any age. It requests no personal information to do so, and nothing leaves the device.
A sync account is different, because it lets other users reach you by username. You must be at least 13 to create an account, or older if the age of digital consent where you live is higher. Accounts are not knowingly created for children under that age. If you believe a child under 13 has created one, write to the address below and it will be deleted.
Changes to this policy
If this policy changes, the revised version will be posted on this page with an updated date.
Contact
Questions about this policy can be sent to jonlee174@gmail.com.