Privacy policy

The short version

Who we are

Inner Anatomy (the "site") is run by the Inner Anatomy team, based in the United States. In this policy, "we" and "us" mean the Inner Anatomy team. We decide how the information described here is used. You can reach us at hello@inneranatomy.com or through our contact page.

What we collect

When you visit

To count visits, our host Cloudflare adds its Web Analytics script to our pages. It uses no cookies and stores nothing on your device, it doesn't fingerprint you or follow you to other sites, and it shows us only totals: how many pages were viewed and which ones, which sites sent visitors, their countries, browsers and kinds of device, and how fast the pages loaded. It never tells us who you are. No other analytics, advertising or tracking tools run on our pages, and our fonts and pictures come from our own site.

Like every website, ours is delivered by a host, Cloudflare, which receives technical details with each request: your IP address, the page you asked for, your browser's name and version, and the time. Cloudflare uses them to deliver the site and to protect it from attacks and abuse. We don't use them to identify you, and we don't combine them with anything else. The technical logs of our account service that we can see are kept for a few days, at most a week, to fix problems.

On your device

The site saves your settings (such as whether labels are shown) and your learning progress (lessons finished, quiz answers, your review schedule, puzzle results and your streak) in your browser's local storage. This stays on your device unless you create an account, and you can erase it at any time by clearing this site's data in your browser.

If you create an account

An account is optional. It lets your progress follow you to your other devices. For an account we keep:

• An account ID, a random code we create.
• The name you choose, if you enter one. It can be a nickname. If you leave it empty, we use "Inner Anatomy learner".
• Your passkey's public key, with technical details about the passkey: its ID, when it was created and last used, how your device connects to it, and whether your passkey manager syncs it. The passkey's private key never leaves your device, and your face, fingerprint or PIN is checked by your device: we never receive it.
• Your learning progress, the same progress described above, so that it can follow you.
• Your sign-ins. When you sign in, your browser receives a random code that keeps you signed in. We keep only a scrambled (hashed) copy of it, with when it started and when it ends.

If you write to us

We receive your email address and your message, and we use them only to answer you.

What we never collect

We don't ask for your email address (unless you write to us), a password, your real name, your age, your location, your contacts, payment details or anything about your health. Please don't put personal information in your account name.

Cookies and similar storage

• One cookie, and only if you sign in. It is called ia_session and keeps you signed in for up to 180 days, or until you sign out. Scripts can't read it, and it is sent only to our site, only over secure connections.
• Local storage in your browser holds your settings, your learning progress and whether you are signed in.

Both are needed for features you choose to use, so we don't show a cookie banner. We use no advertising, analytics or third-party cookies.

How we use it

• To run the site and your account: saving your progress, keeping you signed in and bringing your progress to your other devices.
• To keep the site safe. For example, we count sign-in attempts from each network address for a minute at a time, to stop anyone from guessing their way in.
• To find and fix problems, and to see, as totals, which pages people read, so we can make the site better.
• To answer you when you write to us.

We don't sell your information, share it for advertising, build profiles about you, or use it to make automated decisions about you.

Who else handles it

• Cloudflare, Inc. hosts the site and the account database, protects them from attacks and counts visits for us (Cloudflare Web Analytics). It handles this information only on our behalf, under its data processing terms. The account database is stored in Cloudflare's data centers in North America.
• Your passkey manager, such as Apple, Google, Microsoft or 1Password, stores your passkey under its own privacy policy. We never see what it keeps.

We share information with anyone else only if the law requires it, or if it is needed to protect the safety of our users or the public. If Inner Anatomy ever passes to a new owner, this information would pass with it, still protected by this policy.

How long we keep it

• Your account and progress: until you delete your account.
• Sign-ins: up to 180 days, or until you sign out.
• One-time sign-in checks: a few minutes.
• Technical logs: a few days, at most a week.
• Your messages: as long as we need them to answer you.
• Progress saved in your browser: until you clear it.

Your choices and rights

• Use the site without an account. Everything works without one.
• Delete your account at any time: in the app, open Progress and choose Delete account. This removes your account, your passkey records and your saved progress from our database right away, and it can't be undone. You can then remove the passkey from your passkey manager too.
• Clear what your browser saved by clearing this site's data in your browser's settings.
• Ask us for a copy of your account data, to correct or delete it, or anything else about your information, at hello@inneranatomy.com.

Depending on where you live (for example California, other US states, the European Union or the United Kingdom), the law gives you rights to see, correct, delete or take a copy of your personal information, and to object to how it is used. We give these rights to everyone, wherever you live, and we won't treat you differently for using them.

Because we don't track you across sites, there is nothing for Do Not Track or Global Privacy Control signals to turn off.

Where you live

In the European Union or the United Kingdom

We use your information on these legal bases: to provide the account you ask for (a contract with you), to keep the site safe and working (our legitimate interests), and to meet legal duties. Your information is stored and handled in the United States, and Cloudflare protects these transfers under its data processing terms. You can also complain to your local data protection authority.

In California

We don't sell or share personal information, as the California Consumer Privacy Act defines those words, and we don't use sensitive personal information. The rights described above apply to you.

Children

Inner Anatomy is made for learners, including high school students. Everything works without an account, and an account doesn't ask for personal information. We don't knowingly collect personal information from children under 13, and children under 13 should use the site without an account. If you think a child under 13 has given us personal information, write to us and we will delete it.

Security

Signing in with passkeys means there is no password to steal or guess. We keep only scrambled copies of sign-in codes, the whole site uses secure (HTTPS) connections, and repeated sign-in attempts are limited. No system is perfectly secure, but we work to keep your information safe, and we would tell the people affected by a breach, as the law requires.

Links to other sites

Our pages link to the sources we cite and to other websites. Their own privacy policies apply there.

Changes to this policy

When this policy changes, we update the date at the top. If a change matters, we will also say so on the site before it takes effect.

Contact us

Questions or requests about your privacy: hello@inneranatomy.com, or see our contact page.