STUDY HUB

Terms of Use & Privacy Policy

Last updated 18 August 2026 · Operated by CloudNexis

The short version. One person, one dashboard. We record how and where you sign in so we can tell whether it is really you. We do not sell your data, we do not advertise to you, and we do not track you anywhere else on the internet.

1. What this service is

Study Hub gives you a private study dashboard at study.cloudnexis.net: your own units, flashcards, quizzes and progress. Access is licensed to one named person. Your activation key, email and password are yours alone and must not be shared, resold or published.

2. Your account

You activate once with an access key, then sign in with your email and password.
A new device must present the access key once before it can sign in. This is what stops a leaked password from working on someone else's machine.
Each account may authorise a limited number of devices. Your administrator sets the limit and can remove a device to free a slot.
Only one device may be signed in at a time. Signing in somewhere new signs you out of the previous device.
You are responsible for keeping your password private and for activity under your account.

3. What we collect

Only what the service needs to work and to stay secure.

Data	Why
Email address, display name	To identify your account and send verification or account email.
Password	Stored only as a salted PBKDF2 hash. We never store or see your actual password.
Your study content and progress	Units, cards, quizzes, notes, streaks and mastery, so your dashboard works across devices.
Sign-in time, IP address	To secure the account and detect unusual access.
Approximate location (country, region, city) and network provider	Derived from your IP by our hosting provider. Used to spot a login from an implausible place, or through a VPN or data centre.
Device identifier	A random identifier stored in a cookie so we can recognise a device you have already authorised. It contains nothing about you.
Basic device details	Browser and operating system, screen size, timezone, language, processor count, whether the screen is touch. Your browser sends these on every request. They are combined into a one-way hash used only to notice if an authorised device identifier suddenly appears on a clearly different machine.

What we deliberately do not do

No canvas, WebGL or audio fingerprinting, and no attempt to identify you across other websites.
No advertising, no ad networks, no analytics or tracking pixels from third parties.
No precise GPS location. No access to your camera, microphone, contacts or files.
No selling, renting or sharing of your data for anyone else's marketing.
No reading of your study content for any purpose other than showing it back to you.

4. Why we are allowed to hold it

Most of it is necessary to perform our contract with you: without an account and your content, there is no dashboard. The security information in section 3 is held under our legitimate interest in preventing account sharing, credential theft and fraud, which also protects you if your password leaks. Where the law requires consent, you give it by ticking the box when you activate your account, and you may withdraw it by closing your account.

5. Who else can see it

Your data is not sold or shared for marketing. It is processed only by:

Cloudflare — hosting, storage and network security for the service.
Resend — sending account email such as verification links.
Your administrator, who can see your email, sign-in history, authorised devices and approximate location in order to run the service and investigate misuse.

We will disclose data if we are legally required to. Service data may be processed outside your country; where that happens it is covered by the safeguards our providers offer.

6. How long we keep it

Account and study content — while your account is active.
Sign-in and security records — kept as a rolling history so patterns are visible; older entries are removed once they no longer serve a security purpose.
After deletion — your account, content and devices are removed. Minimal records may remain briefly in backups.

7. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or explain what we hold and why. You may also object to the security processing described above, though we may then be unable to keep offering the account. Depending on where you live you may also complain to your local data protection authority.

Email management@cloudnexis.net and we will respond within 30 days.

8. Security

Passwords are salted and hashed with PBKDF2. Traffic is encrypted in transit. Sessions are bound to a single dashboard and a single device, sign-in attempts are rate limited, and unusual access raises an alert to the administrator. No system is perfect: tell us immediately at the address above if you think your account has been accessed by someone else.

9. Acceptable use

Do not share your key, password or account.
Do not copy, redistribute or resell dashboard content you did not create.
Do not attempt to bypass access controls, scrape content in bulk, or disrupt the service.

Breaching this may result in your access being suspended or removed.

10. Changes

If we change this in a way that materially affects you, we will say so on the sign-in page. The date at the top always reflects the current version.

11. Contact

CloudNexis · management@cloudnexis.net

← Back to sign in