Privacy notice

1. What we store

When you buy access, or when we set up access for you by hand, we store one access record on our server. It holds:

• your email address;
• your access code, in hashed form only (we cannot read it back);
• when the record was created and when your access expires;
• which practice exams it unlocks;
• its source (a purchase, or set up by us);
• a short internal note and change log, such as "Created by purchase" or "Code replaced";
• whether and when the code was revoked; and
• the Stripe Checkout Session ID of your payment, so a payment can never create two codes.

A matching payment row holds the same email and Stripe ID so your code is emailed exactly once, and it is deleted with your access record. That is all. We do not store your name, postal address, phone number or card details.

2. What Stripe collects

Payment happens on Stripe's own checkout page. Stripe collects your card details and may ask for billing details, such as your name or ZIP code. Stripe keeps the record of your payment, including your email address, under its own privacy policy. We do not copy that information into our database.

3. Cookies and your device

• Sign-in cookie. When you sign in, we set one cookie that keeps you signed in. It is strictly necessary, and it ends when your access ends or you sign out.
• Checkout cookie. When you start checkout, we set a short-lived cookie (2 hours) so the next page can show you your code. It is also strictly necessary.
• Saved progress. The practice exam app saves your answers and progress in your browser's local storage. It stays on your device and is never sent to us.

We use no analytics, advertising or tracking cookies, and no third-party scripts. Our fonts are served from our own site. The only outside service your browser visits is Stripe, when you choose to pay.

4. Who processes your information

• Stripe processes your payment.
• Resend sends the email with your access code.
• Our hosting provider runs the server and database that hold your access record.
• Our email provider stores the messages you send to [email protected].

These providers may process data in the United States and other countries. We do not sell your personal information or share it for advertising. We may disclose information if the law requires it or to protect our rights, for example in a payment dispute.

5. How long we keep it

• Access records are deleted automatically 90 days after your access expires or your code is revoked. A cleanup runs every day. Codes we set up by hand with no end date are kept until we revoke them.
• Support emails are kept only as long as we need them to help you, and no longer than 2 years.
• Basic technical logs (such as IP addresses) may be kept briefly by our hosting setup to keep the site secure. Counts of sign-in and lost-code attempts are held in memory only, for up to an hour.
• Saved progress stays on your device until you clear it.

6. Deleting or correcting your information

Email [email protected] from the address you used to buy and tell us what you want: a copy of your record, a correction, or deletion. We will reply within 30 days. Deleting your record ends your access. We will not treat you differently for asking.

We do not track you across websites, so there is nothing for Do Not Track or Global Privacy Control signals to switch off.

7. Security

We use HTTPS throughout, store access codes only as hashes, limit sign-in attempts and keep access to the database to the site operator. No system is perfectly secure, so please keep your code private. If a breach affects your information, we will tell you as the law requires.

8. Children

This site is for adults preparing for a professional licensing exam. We do not knowingly collect information from anyone under 18.

9. Changes to this notice

The date at the top shows when this notice last changed. If a change affects information we already hold, we will email buyers before it takes effect.

10. Contact

LCSW Practice Room
Email: [email protected]