Last updated: 24 August 2026
Only what the service needs to work: your email address, display name, and password (stored as a one-way hash, never in plain text); the speeches and cards you write; your rehearsal timings and per-card settings; and minimal operational records (error logs and rate-limit counters, which include IP addresses, kept only as long as needed for security).
Running Cued for you: storing and showing your speeches, timing your rehearsals, sending account emails (verification, password reset) via our email provider, Mailgun. That's the complete list. We don't sell your data, we don't run advertising, and we don't use your content to train anything.
One session cookie, used solely to keep you signed in. No tracking or third-party cookies.
Our hosting provider (Hostinger) stores the database and files. Mailgun handles account email delivery and therefore sees your email address. If you subscribe to a paid plan, RevenueCat and Stripe process the payment — they see your email address and payment details; we never see or store your card, only an anonymous subscriber id and your subscription's status. No other third parties receive your data, unless the law compels us.
For as long as you have an account. Backups are kept on a rolling basis and expire automatically. When you delete your account (Account → Delete my account), your account and all its content are removed immediately, and fall out of the backup rotation as those backups expire. Anonymised billing records (which subscription events happened, not who you are) are retained for accounting.
You can see and export everything we hold about you (Account → Export my data), correct it (Account → Profile), or erase it (Account → Delete my account) — no request forms, it's all self-serve. If you're in the UK/EU, these correspond to your access, rectification, portability, and erasure rights; for anything else, contact the operator via the address published on cuednotes.com.