Privacy

Crimson Deck is a personal organiser for school life: homework, timetable, notes and messages in one place. It is an independent tool run by an individual. It is not made, run or endorsed by Crimson Global Academy, Crimson Education or any school.

This page says, in plain words, what Crimson Deck keeps about you, why, and how to remove it.

What is stored

• Your account. Your email address, the name you give, your timezone and your settings. Each sign-in session also records the IP address and browser it came from, so that sessions can be told apart and ended.
• What you add. Subjects, homework, calendar entries, notes, flashcards, grades you type in, reminders, links and the files you upload.
• Messages. Direct chats with other Crimson Deck users, and drafts you write here.
• Forwarded email. If you set up forwarding from a mailbox, every email that mailbox forwards is stored here: sender, recipients, subject, text and attachments.
• Connections. Your private forwarding address, any calendar links you add, and, if you allow sending from Gmail, the Google access tokens for that. Calendar links and tokens are stored encrypted.
• A record of actions. For example “a message was sent” or “a file was attached”, with identifiers and counts only, never the content.

What it is used for

Only to show your own information back to you and to do what you ask: send a message you wrote, remind you of a deadline, show a forwarded email as a conversation. There is no advertising and no tracking for marketing, nothing is sold, and your content is not sent to any AI service.

Information from Google

• Signing in with Google gives Crimson Deck your name, email address and profile picture, used only to identify your account. Signing in never gives access to your mailbox.
• “Allow sending from Gmail” is a separate, optional permission (Google calls it gmail.send). It lets Crimson Deck send the emails you write and send here, from your own address. It cannot read, change or delete mail in your mailbox. The access tokens are stored encrypted and are removed when you withdraw the permission here.
• Information received from Google is used only to provide these two features. It is not used for advertising, not sold, not used to train AI models, and not read by a person, unless you ask for help with a problem and agree to it, or it is required by law or needed for security.

Crimson Deck’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Other people

• A direct chat is stored for both people in it. If you delete your account, the other person keeps their copy, as they would keep an email you sent.
• An email you send from here goes to the people you address it to, through Gmail.
• There is no directory and no public profile. Someone can only start a chat with you if they already know your exact email address, and you can switch direct chat off in Settings.
• Emails that others send you, once forwarded here, are stored like any other forwarded email.

Who else handles the data

Crimson Deck runs on services provided by other companies, which store or carry data on its behalf:

• Railway: runs the website and holds the database and uploaded files.
• Resend: delivers sign-in codes and notices, and receives forwarded email.
• Cloudflare: answers the domain name lookups for the site.
• Google: sign-in with Google, and sending through Gmail if you allow it.

These companies may store data in countries other than yours.

Your school’s systems

Crimson Deck never asks for your school password and does not sign in to school platforms for you. Links to them open the official sites. Official deadlines, grades, attendance and submissions are the ones on your school’s own platforms. Before forwarding a school mailbox to Crimson Deck, check that your school allows it.

Keeping and deleting

• Your information is kept until you delete it or delete your account.
• Settings has Export my data, which downloads what is held for you, and Delete account, which removes your account and everything stored for it here.
• Stopping forwarding, or disconnecting a calendar or Gmail, deletes the copies and tokens kept here for that connection. It never deletes anything in your mailbox or on school platforms.
• Copies held in the hosting provider’s backups, if any, expire on that provider’s schedule.

Security

Connections to the site are encrypted. Uploaded files are private and are only served to the signed-in person they belong to. Access tokens and calendar links are encrypted before they are stored. No system can promise perfect security.

Age

Crimson Deck is meant for secondary-school students and their teachers. If you are younger than the age at which you can agree to online services on your own where you live, use it only with a parent’s or guardian’s permission.

Changes and contact

If this page changes in a way that matters, the date at the top changes.

Questions or requests about this page can be sent to the person who runs Crimson Deck.