How Mnemon uses your data

Your account and learning data

Mnemon stores your display name, an internal account identifier, and links to the Google or Discord accounts you use to sign in. Mnemon stores the provider's account identifier, but does not retain OAuth access tokens, refresh tokens, authorization codes, or payment-card details.

Mnemon stores your preferences, enabled modules, card scheduling state, review history, earned learning achievements, answer-choice telemetry, and curriculum reports or comments you submit. It also stores Premium entitlement history and local Stripe customer, checkout, purchase, and subscription identifiers and statuses where applicable.

Payments

Stripe receives and processes payment information in its own systems under Stripe's policies. Mnemon stores the identifiers and status information needed to reconcile access, but not your payment-card details.

First-party acquisition analytics and cookies

Mnemon uses first-party analytics to understand how people find the site and progress through signup, study, Premium viewing, checkout, and purchase milestones.

On a first eligible visit, Mnemon sets a first-party mnemon_visitor cookie containing a random identifier for up to 180 days. First-touch attribution is recorded once for that visitor and is not replaced on later visits. It may include the landing path, the referrer's hostname (not its full URL), and bounded utm_source, utm_medium, utm_campaign, utm_content, and utm_term values.

A separate random analytics session identifier is kept in Mnemon's signed session cookie. Analytics records deliberately do not store your IP address, full referrer URL, raw user-agent string, browser fingerprint, or inferred geography or device profile.

There is currently no analytics opt-out control and no automatic expiry process for stored analytics records. The visitor cookie expires after 180 days, but existing visitor and event rows may remain for aggregate measurement.

Deleting your account

You can permanently delete your account from the Danger zone on the Account page. Deletion removes your login identities and user-owned account, learning, report, entitlement, and local billing data. It does not automatically cancel or refund Stripe billing, so deletion is blocked while a recurring subscription is active, trialling, or past due.

Acquisition events may remain for aggregate measurement after deletion. Their account link, direct account-derived idempotency key, and analytics session identifier are removed. The separate pseudonymous visitor identifier and first-touch attribution may remain.