Privacy Policy

What we collect

Nothing, if you never sign in. Practice attempts, timers and scores are stored in your own browser (localStorage). They never leave your device unless you create an account.

If you sign in: your email address, and your practice attempts (which questions you answered and what you picked), so that progress follows you across devices. If you continue with Google, Google also passes on your name and profile picture, which stay with your account; we ask Google for nothing beyond that.

If you buy: Stripe handles the payment and tells us only which tier you bought and when the access ends. We never see your card details.

Usage events: we record anonymous product events — an attempt started, an attempt submitted with its score, a page viewed — to see where the product is confusing. These carry no name, no email and no account identifier. They do carry a random identifier stored in your browser, so that we can tell one visit from a hundred; it is generated on your device, means nothing outside our own event log, and disappears when you clear your browser data. Where you arrived from is recorded as a domain name only (say, google.com) — never the full address you came from.

What we never do

We do not sell or rent your data. We do not email you anything you did not ask for. We run no third-party advertising or tracking pixels — this site loads no scripts from any domain but its own, which you are welcome to verify in your browser's network tab.

Where it lives

Account data is stored with Supabase (PostgreSQL, hosted on AWS in the United States). Row-level security means your rows are readable only by your own authenticated session — no client can read anyone else's rows, whatever it asks for.

Payments are taken by Stripe on its own checkout page: your card details go to Stripe and never reach this site. We keep only what your access needs — the tier, the date it ends and Stripe's reference for the payment.

Deleting your data

Signed out, clearing your browser data removes everything. With an account, email support@cblesimulator.com and we delete the account and every attempt tied to it — deletion cascades, so nothing is left behind. Stripe keeps its own record of a payment, as the law requires of it.

Contact

Questions about any of this, or a deletion request: support@cblesimulator.com. We answer deletion requests within 30 days.

See also our Terms.