Privacy
Privacy
We store as little as we can. This page lists all of it.
What runs in your browser
We use Google Analytics to see how many people visit and which pages they read. It is told which pages were opened, roughly where in the world from, and what kind of browser and device. It is not told your name, your email address, or anything you answered.
It runs with advertising switched off, so a visit here does not put you in an ad audience anywhere. It sets a couple of cookies. Block them if you like; the site works the same either way.
The checkout is Paddle's. Your card number goes to them, not to us.
What an account holds
| What | Why it is there |
|---|---|
| Your email address, and a password if you chose to set one | To sign you in. You normally sign in with a code we email you. A password is optional, and if you set one it is stored hashed, so nobody here can read it. |
| Your first and last name, if you have given them | Optional. It is so the site can use your name instead of your email address. |
| Your exam date, and every date you have set before it | The dashboard counts down to the next one, the flashcard schedule fits itself around it, and the older dates are what a retake is measured against. |
| Every answer you record: the question, what you picked, whether it was right, and the minute you sent it | Your scores, your weak sections, and the drills that redo what you got wrong. The time is there so we can show your progress over weeks. |
| Your mock exam runs: the questions served, when the run opened and closed, the score, and the split by section | So a run survives a closed tab and a result survives a reload. |
| Your flashcard reviews and reveals, each with its time | The record of what you have actually studied, and what the daily pace is counted from. |
| Where each card stands: its rung, when it is next due, and how many times you have graded it | That spacing is the whole point of a flashcard deck. |
| How many new cards a day you asked for | A setting on the profile page, and the only one the deck reads. |
| Anything you report about a question, and what you wrote in the box | So a question that is wrong can be found and corrected. |
| Whether you have paid, and the payment transaction id | To unlock the bank, and to restore your purchase if you close the account and sign up again with the same address. |
Never asked for
- A card number, or any part of one. You type it into the checkout, which is not this site.
- A postal address, a phone number, or a date of birth. We never ask.
- Your NMLS unique identifier, your license number, or anything else that identifies you to a regulator.
- Your employer, your trade, or which classification you are applying for.
- Anything bought from a data broker, an advertiser, or another site.
Before there is an account
Free practice stays on your device. If you sign up later it is carried over, so you do not lose your progress.
Signing in does not set any cookies. The only cookies on the site are Google Analytics.
Who else sees any of it
| Who | What they hold |
|---|---|
| Google Analytics | Page counts, as described above: which pages were opened, roughly where from, and what kind of device. Never your name, your email, or an answer. |
| Supabase | The database and the sign-in service. Everything in the table above lives there, and nowhere else. |
| Paddle | Payment. Paddle is the merchant of record, so it takes your billing details and card directly, works out the tax, and sends the receipt. We get the transaction id and whether it succeeded, never the card number. |
| Resend | The sign-in code emails. It sees your address and the message, nothing else. |
| Cloudflare | Serving the pages. It sees the requests any web host sees. |
Closing the account
There is a close button on your profile page. Press it and the account is gone. We keep the payment record so we can honor a refund or restore a purchase, and nothing else.
| What happens | To what |
|---|---|
| Deleted | Your sign-in, so the address is free again and nobody can sign in as you. Your profile, with your name, your exam date and your card pace. The unlock on the account, if you had bought the bank. The rung and due date of every flashcard. |
| Marked closed | Your answers, your mock runs, your flashcard reviews and reveals, your question reports, and your exam-date history. Hidden from everything on the site the moment you close. Kept only so a closure by mistake can be undone. |
| Written down | A note that this address closed an account, and when. That is how we restore a purchase if you sign up again with the same address. |
How long any of it is kept
Your account is kept until you close it. Come back after a year and it is still there.
We hold on to the payment record, because refunds and tax need it. Everything else goes. If you closed by mistake, email us soon and we can probably get it back.
What Google Analytics recorded sits with Google, not here. It was never tied to your account, so closing the account does not touch it.
Asking for it, or asking for it to go
The profile page has two buttons: a reset that clears your progress and keeps the account, and a close that ends it. If you want a copy of what we hold, or want something removed that those buttons do not reach, write to [email protected].
California's Consumer Privacy Act gives California residents the right to ask what is held about them, to have mistakes corrected, and to have it deleted. Email that address to ask. If we refuse a request, you can take it to the California Privacy Protection Agency.