BrokerExam

Privacy

Privacy

We store as little as we can. Here is what it is.

What runs in your browser

Reading any page here runs one script that is not ours: Google Analytics. It counts page views, so there is some way of knowing which parts of the site are worth writing more of. It is told which pages were opened and in what order, roughly where in the world the request came from, and what kind of browser and device made it. It is not told your name, your email address, or anything you answered, because none of that is on the page it reads.

It runs with advertising switched off. Ad personalization signals and Google's cross-device signals are both set to false in the tag on every page of this site, so a visit here does not become an advertising audience anywhere. Google Analytics does not store the IP address the request came from.

We use Google Analytics to see how many people visit and which pages they read. It sets a couple of cookies. Block them if you like; the site works the same either way.

The checkout is Paddle's. Your card number goes to them, not to us.

We do not sell your data and there are no ads. Google Analytics and Paddle are the only third parties.

What an account holds

What Why it is there
Your email address, a password if you chose to set one, and which Google or Microsoft account signs you in, if you use one To sign you in. Signing in normally works by a code emailed to you; a password is optional, and one you set is stored hashed so nobody here can read it. If you sign in with Google or Microsoft, we keep the address it confirms and the id of that account, so the same button opens the same account next time. Nothing else from it: not your name, not your photo, and nothing that would let us act in that account.
Your first and last name, if you have given them Optional. It is just so the site can use your name instead of your email address.
Your sitting date, and every date you have set before it The dashboard counts down to the next one, the flashcard schedule fits itself around it, and the older dates are what a second attempt is measured against.
Every answer you record: the question, what you picked, whether it was right, and the minute you sent it Your scores, your weak areas, and the drills that redo what you got wrong. The time is there so progress can be drawn across weeks.
Your mock exam runs: the questions served, when the run opened and closed, the score, and the split by section So a run survives a closed tab and a result survives a reload.
Your flashcard reviews and reveals, each with its time The record of what you have actually studied, and what the daily pace is counted from.
Where each card stands: its rung, when it is next due, and how many times you have graded it The spacing between cards is the whole of what a flashcard deck does.
How many new cards a day you asked for A setting on the profile page, and the only one the deck reads.
Anything you report about a question, and what you wrote in the box So a question that is wrong can be found and corrected.
Whether you have paid, and the Paddle transaction id To unlock the bank, and to give a purchase back if you close the account and sign up again on the same address.
Your email settings, your browser's time zone, and a record of the emails we have sent you So email arrives at a sensible hour where you are and never arrives twice. For study tips and updates, the record also says whether and when you asked for them.
Which links in our emails you opened, and for tips and updates, whether the email was opened Each link carries a random code tied to that one email, and tips and updates carry a small image that loads when the email is read. It tells us which emails are worth sending. Account and progress email carries no such image.
What you tell us after your sitting: how it went, your score if you give it, what the exam asked that we did not cover, and a rating So we can find what the exam asks that the site does not cover yet, and write those questions next.

Email

Every account gets account and progress email: a welcome, a note when you buy, a weekly summary while you have full access and an exam date ahead, a reminder two days before your exam, and one email after it asking how it went. Study tips and updates go only to accounts that asked for them. You can turn either kind off on your profile page, or with the link at the bottom of any email, without signing in.

Never asked for

Before there is an account

Free practice is kept on your device, and each answer you give on a free page is also sent to us: the question, what you picked, whether it was right, the time, your IP address, your browser's user-agent string, and a random id your browser keeps so one visitor's answers can be read together. None of it is tied to an account, and closing an account does not reach it, because it never belonged to one. It is kept so we can see which free questions people miss and to stop abuse of the free pages. If you sign up later we carry the practice on your device over so you do not lose your progress.

Signing in does not set any cookies. The only cookies on the site are Google Analytics.

Who else sees any of it

Who What they hold
OVH Hosting. The database and the sign-in service run on a server we rent from OVH in Canada. Everything in the table above is held there, and no second copy of it is kept anywhere else.
Google and Microsoft Sign-in, only if you press one of their buttons. The one you choose tells us your email address and whether it has confirmed that address is yours. It also sends your name, which we do not keep. It learns that you signed in to BrokerExam, and nothing about what you do here.
Resend Sends every email: the sign-in code, account and progress email, and the study tips and updates you asked for. It sees your address and the messages, and for tips and updates whether they were opened, and nothing else about you.
Paddle Payment. Paddle is the merchant of record, so it takes your billing details and card directly, works out the tax, and issues the receipt. BrokerExam receives the transaction id and whether it succeeded, and never sees a card number.
Google Analytics Measurement, as described above: pages opened, roughly where the request came from, and what kind of device made it. Never your name, your address, or an answer.
Cloudflare Serving the pages. It sees the requests any web host sees.

Each of the five is used for the one job beside its name and is given nothing beyond what that job needs. None of them is paid in data, and none may use what it holds here for a purpose of its own.

Closing the account

There is a delete button on your profile. Press it and the account is gone. We keep the payment record so we can honour a refund or restore a purchase, and nothing else.

What happens To what
Deleted Your sign-in row and any Google or Microsoft sign-in tied to it, so the address is free again and nobody can sign in as it. Your profile, with your name, your sitting date and your card pace. Your entitlement row. The rung and due date of every flashcard.
Marked closed Your answers, your mock runs, your flashcard reviews and reveals, your question reports, and your sitting-date history. Marked at the moment you close, and unreadable by anything on the site from that moment. Kept for one reason: an undo.
Written down One row saying this address closed an account, and when. It is what gives a purchase back if you ever sign up again on the same address.

Then you are signed out, and the address can be used to sign up again from scratch. A new account starts with none of the old one visible. If you would rather the marked rows were really gone as well, write to [email protected] and they will be deleted.

The same page carries a smaller version: a reset that clears your answers, runs and reviews and keeps the account, for starting the study over without losing your sitting date.

How long any of it is kept

We keep your account until you delete it. Come back after a year and it is still there.

We hold on to the payment record, because refunds and tax need it. Everything else goes. If you deleted by mistake, email us soon and we can probably get it back.

What Google Analytics recorded sits with Google under that property, not here, and closing an account does not reach it. It was never joined to your account in the first place.

Asking for it, or asking for it to go

The profile page has both: a reset that clears your progress and keeps the account, and a close that ends the account. If you would rather have a copy of what is held, or want something removed that those two buttons do not reach, write to [email protected].

Canada's federal Personal Information Protection and Electronic Documents Act gives you the right to ask what is held about you and to have a mistake corrected. Asking at that address is how. If a request is refused, the Office of the Privacy Commissioner of Canada is who to take it to.