What we collect, and what we do not

Last updated September 8, 2026

What we collect

Your account: email address, display name, password (stored only as a salted scrypt hash, never in the clear), and the optional goal track and test date you set. Your practice activity: which questions you answered, what you picked, whether it was right, and response times, because that is what powers your progress page. Your question reports, so we can fix what you flag.

Your IP address, briefly. Sign in, sign up, password reset and question reports are rate limited by IP, so an attacker cannot guess passwords or flood the site, and that check has to record which address made the attempt. It is used for nothing else, and a daily job deletes every rate-limit record whose window has closed, so an address is held for about a day at most rather than kept. Practice is rate limited too, but by account rather than by address.

Who else touches your data

Vercel hosts the site and so handles every request. Neon stores the database. Stripe processes payments. Resend sends the one email this product sends, the password reset. Nobody else.

Payments

Payments are processed by Stripe. Your card number goes to Stripe and never touches our servers. We store only the outcome: that your account paid, when, the amount, and Stripe's reference ids, which we need to grant access and process refunds.

Cookies

One cookie, the session that keeps you signed in. No advertising cookies and no cross-site tracking. If we add product analytics later (for example PostHog, to see which features get used), this page will say so first.

What we never do

We do not sell your data, share it with advertisers, or send marketing email you did not ask for. Recruiting services do not get your scores; nobody does but you.

Deletion

There is a delete button at the bottom of your account page. It removes your account, your practice history and your scores immediately, and it cannot be undone. You do not have to ask us, and you do not have to explain why.

Two things outlive it, both with your name detached. Your purchase record, because tax and accounting rules require keeping it: what is left is the amount, the date and Stripe's reference ids, with no link to you and no copy of your email. And any question report of yours that we already published as a correction, because the corrections page is how this product admits its own mistakes and that belongs to everyone who studies here, not just to you.

Deleting does not refund you. If you want your money back, ask at littlefieldjake4@gmail.com before you delete, because a refund needs an account to refund.

Contact

Privacy questions: littlefieldjake4@gmail.com