Privacy Policy

Last updated: September 2026

Data we collect

• Email address (authentication and premium email alerts)
• Watch preferences (center codes and test dates)
• Push subscription endpoints (web push delivery)
• Stripe customer ID (billing)
• First-party usage stats via self-hosted Umami (page views and in-app events; no advertising cookies; IP is used only to derive coarse geo, then discarded)
• Google Analytics 4 events, only if you accept the cookie banner

How we use data

To authenticate you, deliver notifications, process season-pass payments, and improve the service. We do not sell personal data.

Cookies

Session cookies keep you signed in. Umami is cookieless and first-party. GA4 may set analytics cookies after you accept the cookie banner.

Third parties

• Stripe — payment processing
• Resend or your SMTP provider — transactional email
• Self-hosted Umami on our VPS — first-party usage stats
• Google Analytics — usage analytics (opt-in)
• College Board APIs — public test center data (no PII sent)

Retention

Account data is retained while your account is active. You may request deletion by contacting support.