Privacy

Updated October 15, 2026

stanfordstudy isn't open yet. This site is one page and a waitlist, and the waitlist keeps only what it lists below. If you sign in to the app, your account keeps what If you sign in to the app lists, and nothing else.

What the waitlist keeps

• Your @stanford.edu email address.
• When you joined.
• Which of the page's two sign-up forms you used (the top or the bottom one).

Nothing else: no name, no password, no courses and nothing about your browser.

What it's for

Only to email you when stanfordstudy opens. Your address isn't sold, shared or used for anything else, and it isn't added to any other mailing list.

Where it's kept

In a Postgres database run by Neon, in the United States (Oregon). The site itself runs on Cloudflare, which handles every request to it.

How long it's kept

Until stanfordstudy opens and you've had that one email. Then the whole list is deleted. If stanfordstudy hasn't opened by September 30, 2027, the list is deleted then, without an email. You can have your address removed any time before that (below).

The email will be sent through an email service that receives the list to send it. Before it's sent, this page will name that service.

What passes through without being kept

• Your IP address is used to stop too many attempts from one network in a minute. The waitlist doesn't store it. Cloudflare sees it with each request, as any host does, but the site keeps no request logs: its only logs are the waitlist's own events (such as “an address was added from the top form”), which never contain your address or your IP.
• When the security check is on, it loads once you start typing in a sign-up form, not before. It's Cloudflare Turnstile, which checks your browser in the background to tell people from bots; stanfordstudy doesn't receive or keep what it looks at. See Cloudflare's privacy policy.
• stanfordstudy sets no cookies and runs no analytics, ads or trackers.

If you sign in to the app

Signing in is optional: the app works in your browser without it. When you sign in with Google, your account keeps:

• Your Google name, your @stanford.edu address and the link to your Google picture.
• The files you add to your courses while signed in, with their names, course and week.
• The text read from them, including scanned pages read by a model and transcripts of recordings, and the search data made from that text.
• The flashcards, summaries and quizzes you ask for.
• How much of each limit you've used, and the token counts of AI requests (never their text).
• Your sign-in, which ends after 7 days unused and after 14 days at most, and works only with a key your browser keeps.

It doesn't keep a password, Google's access tokens, your IP address or browser details, or your questions and the answers to them.

Signing in goes through Google, which sees that you signed in to stanfordstudy and shares your name, your address and your picture with it once you allow that, never your password. See Google's privacy policy.

The app signs in only at its own address on your computer, stanfordstudy.localhost:3000, so another project you run on port 3000 can't use your sign-in. Don't open anything else at that address.

Where the account is kept

Files are kept in Cloudflare R2, in a bucket placed in western North America (Cloudflare's placement hint, which it follows as far as it can), and everything else in the same Neon database in Oregon. The service runs on Cloudflare Workers, in whichever of Cloudflare's data centres is nearest you. Recordings and scanned pages are converted for reading in a short-lived Cloudflare container that has no internet access and keeps nothing: its copy of the file is deleted after each job, and its disk is wiped when it stops.

Who processes it

Cloudflare Workers AI does four jobs: it reads scanned pages and photos, transcribes recordings, converts spreadsheets to text, and makes the search data, from the text of your files and from each question you ask. It's called directly, inside Cloudflare, and nothing it reads goes through AI Gateway. Anthropic's Claude writes answers and study material from the excerpts or files involved in your request: a question sends at most eight short excerpts, and a summary or quiz sends the text of the files you chose. Requests to Claude pass through Cloudflare's AI Gateway, which records only the model, token counts, cost and timing, never the text. Nothing in your account is sold, and nothing goes to anyone else. See Cloudflare's and Anthropic's privacy policies. Under their published terms, read on October 15, 2026: Anthropic doesn't train its models on what the app sends or on Claude's answers, and deletes both within 30 days unless its terms require longer (a request flagged for its usage policy, or one it must keep by law; a summary made in a batch stays available to the app for 29 days). Cloudflare doesn't train models on what Workers AI reads or writes, and uses what passes through Workers AI and AI Gateway only to provide the service.

What stays in your browser

Your courses, notes, flashcards, syllabus copies and recordings (unless you choose Transcribe on the server for one) stay in your browser. When you ask a question or make study material, the few excerpts of notes and recordings it needs are sent with it and aren't kept by your account (Anthropic's copy goes by the schedule above); a request that fails keeps a recording's transcript for at most 7 days, so it can be tried again.

Your account's limits

Each account has limits on storage, transcription hours, scanned pages, chats and generations. Settings shows how much of each you've used.

Deleting what the account keeps

Deleting a file deletes its text, its search data and what was made from it. Delete account, in Settings, removes everything in your account within minutes. Cloudflare's processing records last up to 3 days: a file's hold counts and codes, and a summary's, quiz's or flashcards' hold what was made, for a day (3 if the run failed). Its logs, which hold no text, last up to 7 days. Anthropic's copies of requests go by their own schedule, above.

Removing your address

Email hello@stanfordstudy.com from the address you signed up with, and it's deleted from the list.

Who runs this

stanfordstudy is a student project. Independent. Not affiliated with Stanford University.