Privacy Policy
Last updated: August 2026
1. Who we are
Quasar (“we”, “us”, or “our”) operates the website at quasar.app. We are committed to protecting your personal data and your right to privacy. If you have any questions about this policy or our privacy practices, please contact us at privacy@quasar.app.
2. What data we collect
We collect the following categories of personal data:
- Account data: email address, display name, and profile picture when you sign up via Google OAuth or email/password.
- Usage data: which videos you process, flashcards you generate, decks you create, and paths you follow — stored in Firebase Firestore.
- YouTube content data: video IDs and metadata you submit, plus AI-generated transcripts and flashcards.
- Device & browser data: user agent, approximate location (country-level, via IP), and consent preferences.
- Cookie data: session identifiers, consent records, and anonymous analytics (Google Analytics where permitted).
3. How we use your data
We use your data for the following purposes:
- Providing and improving the Quasar service
- Authenticating you and managing your account
- Generating flashcards and transcripts from YouTube videos
- Serving contextual advertising via Google AdSense (EEA/UK users: only after explicit consent)
- Analytics and product improvement
- Legal compliance and fraud prevention
4. Legal basis for processing (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases are:
- Contract: processing necessary to perform our contract with you (providing the service you signed up for).
- Legitimate interests: fraud prevention, network security, analytics, and direct marketing (where not overridden by your rights).
- Consent: for optional processing such as personalized advertising and non-essential cookies. You can withdraw consent at any time via our cookie consent banner.
5. Third-party services
We share data with the following third-party service providers:
| Provider | Purpose | Data shared |
|---|---|---|
| Google AdSense | Contextual advertising | Anonymous page views, ad interactions |
| Google Firebase | Auth, database, storage | Account, usage, and content data |
| OpenAI | Flashcard generation, transcription | YouTube video content and transcripts |
| YouTube Data API | Video metadata and captions | Video IDs and public metadata |
6. Data retention
We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and all associated data at any time by contacting us. We will delete or anonymize your data within 30 days of a verified deletion request, except where retention is required by law.
7. Your rights
Depending on your location, you may have the following rights:
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data
- Restriction — request we limit how we process your data
- Portability — request a machine-readable export of your data
- Objection — object to certain processing activities
- Withdraw consent — at any time for consent-based processing
To exercise any of these rights, email us at privacy@quasar.app. We will respond within 30 days.
8. Cookies and advertising
We use cookies to deliver and measure advertising via Google AdSense. When you are located in the EEA, UK, or Switzerland, we display a consent banner before serving personalized ads. No advertising cookies are set until you give explicit consent. You can change your preferences or withdraw consent at any time via our cookie management panel.
Our site also responds to the browser’s Global Privacy Control (GPC) signal. When GPC is enabled, we treat it as a decline of non-essential cookies and advertising personalization.
9. Data security
We use Firebase Authentication with industry-standard security practices. All data in transit is encrypted via TLS. We regularly review our security practices and conduct vulnerability assessments. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. International transfers
Your data may be transferred to and processed in countries outside of your country of residence, including the United States. Where we transfer data outside of the EEA, we rely on Standard Contractual Clauses or other approved transfer mechanisms.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. For significant changes, we will provide a prominent notice on our website.
12. Contact us
If you have any questions about this Privacy Policy or our privacy practices, please contact our data protection team:
Quasar Data Protection