Your privacy

Unfoldary is an early public beta. Your canvases are private to your account unless you share one: a share link lets anyone who has it read a copy (see Share links).

What is stored

We store your questions, generated canvas content, notes and account email, plus your plan, subscription status and a record of each prompt you use. If you pay for a plan, we also store your Stripe customer and subscription identifiers; your card and billing details stay with Stripe. Guest sessions use a signed cookie so only your browser can open its canvas. Signing up in that browser transfers the canvas to your account.

Your own material

If you add material to a canvas (a PDF, pasted text or a link), we store the text taken from it, its title, and the file name or link. We don’t keep the PDF itself. For a link, our server fetches the page to take its text. When the AI answers, it can read passages of that text, which are sent to our AI provider with your question. If you remove the material, we delete its text; we keep its title, file name or link, size and a fingerprint of the text, so cards that cited it can say “Removed material”.

Your progress

We store your progress with each canvas: your quiz answers and scores, how you marked recall cards, which cards you’ve opened in the reader, where you left off, any goal you set, and the cards you’ve marked understood or to revisit. So you can undo changes, we also keep the content before and after each of your last 20 changes to a canvas beside it, deleted with the canvas.

Problem reports

When you use “This seems wrong” on a card, we keep the card’s title, its text (up to 2,000 characters) and your note, with the time and which canvas and card it was. The person who runs Unfoldary reads these reports to find and fix problems. They are kept in your account’s files: once they reach 2 MB the oldest are dropped (at most about 4 MB is kept), they are included in your export, and they are removed when you delete your account.

When you share a canvas, we store a copy of it that anyone with the link can read, without an account, until you revoke the link, move the canvas to Trash or delete your account. The copy leaves out your conversations, progress, marks, checkpoints and your material (its text, quotes and citations); your own notes are included only if you choose. Cards the AI wrote from your material can still summarise it. The copy doesn’t change as you keep working unless you update the snapshot. Shared pages are never recorded by session recording.

Service providers

OpenAI processes your questions and canvas context to generate answers (Anthropic may be used instead), including web searches when needed. Railway hosts the app and canvas files. Supabase handles accounts, passwords, plans and usage records. Stripe processes payments and stores your billing details. To process a payment we share your email address and account ID with Stripe; we store your plan, Stripe customer and subscription identifiers. Cloudflare provides domain and network services. PostHog, in the EU, records how the site is used: pages viewed, where visits come from, device and approximate location, and actions such as asking a question, signing up or choosing a plan. It doesn’t receive your email address. Account events are linked to your account ID so we can see how accounts use the product.

Analytics and session recording

To see where the site is confusing or broken, PostHog records sessions: the pages you visit, where you move and click, and what appears on screen, which can include canvas content. Anything you type into a field is hidden in these recordings, and so is the text of your own material where it is shown: its previews, the passages cards quote from it, and quote cards. Other canvas content, including cards that summarise your material, can appear. Recordings help us fix problems and are never used for advertising. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded. You can also turn analytics off here; the choice is saved in this browser.

Optional advertising measurement

If you choose Allow in the advertising measurement prompt, Meta receives page visits and events when you finish generating a canvas and a follow-up answer. Its Pixel may use cookies, your IP address, browser information and page URLs to attribute activity to Facebook and Instagram ads. Our conversion events contain no questions, generated canvas content or email addresses, and automatic event detection and advanced matching are disabled. This is separate from PostHog session recording. No Meta code loads before you allow it. You can change your choice below; opting out stops future advertising events. Do Not Track or Global Privacy Control also keeps this measurement off.

Cookies and retention

We use essential cookies for guest sessions and sign-in. Guest cookies expire after seven days. Analytics sets no cookies: it keeps a session identifier in your browser’s session storage, which is cleared when you close the tab, and if you turn analytics off, that choice is kept in local storage. Account canvases remain stored for your use. If you allow advertising measurement, Meta may set advertising cookies. Your allow or decline choice is stored in this browser.

Deleting your account from the account page cancels any paid subscription immediately and removes your canvases, their material, progress and undo history, your problem reports, your share links, your usage records and your sign-in. Stripe keeps its own customer and invoice records, as payment and tax rules require, so deleting your Unfoldary account doesn’t remove them.

Plans, billing and refunds are covered by the terms.

Last updated: 27 September 2026.