BrokerExam

Privacy

What this site holds about you

Listed rather than described, because a list can be checked against the database and a paragraph cannot.

What runs in your browser

Reading any page here runs one script that is not ours: Google Analytics. It counts page views, so there is some way of knowing which parts of the site are worth writing more of. It is told which pages were opened and in what order, roughly where in the world the request came from, and what kind of browser and device made it. It is not told your name, your email address, or anything you answered, because none of that is on the page it reads.

It runs with advertising switched off. Ad personalization signals and Google's cross-device signals are both set to false in the tag on every page of this site, so a visit here does not become an advertising audience anywhere. Google Analytics does not store the IP address the request came from.

That tag sets two cookies of its own, both belonging to this domain: _ga, and a second one named after the analytics property. Between them they tell one browser's visits apart from another's, and they hold a random identifier rather than anything about you. Google's own default life for them is two years. Clearing your browser data for this site removes them, and every page here works exactly the same for a browser that blocks them.

Pressing the buy button loads a second one: Paddle's checkout, fetched at that moment and not before, so a reader who never buys never meets it. The overlay it draws is Paddle's own page inside this one, and whatever it sets while it is open belongs to Paddle rather than to this site.

Those two are the whole list. Nothing about you is sold, nothing is shared with anybody who is not named further down this page, and there is no advertising anywhere on this site.

What an account holds

What Why it is there
Your email address and password To sign you in. The password is stored hashed and nobody here can read it.
Your first and last name Asked for at sign-up, so pages can address you rather than your email.
Your sitting date, and every date you have set before it The dashboard counts down to the next one, the flashcard schedule fits itself around it, and the older dates are what a second attempt is measured against.
Every answer you record: the question, what you picked, whether it was right, and the minute you sent it Your scores, your weak areas, and the drills that redo what you got wrong. The time is there so progress can be drawn across weeks.
Your mock exam runs: the questions served, when the run opened and closed, the score, and the split by section So a run survives a closed tab and a result survives a reload.
Your flashcard reviews and reveals, each with its time The record of what you have actually studied, and what the daily pace is counted from.
Where each card stands: its rung, when it is next due, and how many times you have graded it The spacing between cards is the whole of what a flashcard deck does.
How many new cards a day you asked for A setting on the profile page, and the only one the deck reads.
Anything you report about a question, and what you wrote in the box So a question that is wrong can be found and corrected.
Whether you have paid, and the Paddle transaction id To unlock the bank, and to give a purchase back if you close the account and sign up again on the same address.

Never asked for

Before there is an account

The free practice pages record which questions you have answered in your browser's own storage, so a page you come back to remembers where you were. The diagnostic leaves one mark of the same kind, so a run you walked away from opens where you left it. Neither ever leaves the browser until you make an account, and if you do, what you practised is carried into the new account so it counts. Clearing your browser data clears both.

The signed-in session is kept in that same storage rather than in a cookie. Nothing this site does with an account uses a cookie at all. The two described above are the analytics tag's, and on an ordinary page they are the only ones you will have.

Who else sees any of it

Who What they hold
Supabase The database and the sign-in service. Everything in the table above is held there, in the Canadian region (ca-central-1). No second copy of it is kept anywhere else.
Paddle Payment. Paddle is the merchant of record, so it takes your billing details and card directly, works out the tax, and issues the receipt. BrokerExam receives the transaction id and whether it succeeded, and never sees a card number.
Google Analytics Measurement, as described above: pages opened, roughly where the request came from, and what kind of device made it. Never your name, your address, or an answer.
Resend The emails the account system sends: the address confirmation at sign-up and a password reset. It handles your address and the message, and nothing else about you.
Cloudflare Serving the pages. It sees the requests any web host sees.

Each of the five is used for the one job beside its name and is given nothing beyond what that job needs. None of them is paid in data, and none may use what it holds here for a purpose of its own.

Closing the account

The profile page has a close button, and it is total. Nobody has to be asked and nothing is queued for review. The press runs one database function that can only ever name the account making the call, and it does three different things to three different sets of rows.

What happens To what
Deleted Your sign-in row, so the address is free again and nobody can sign in as it. Your profile, with your name, your sitting date and your card pace. Your entitlement row. The rung and due date of every flashcard.
Marked closed Your answers, your mock runs, your flashcard reviews and reveals, your question reports, and your sitting-date history. Marked at the moment you close, and unreadable by anything on the site from that moment. Kept for one reason: an undo.
Written down One row saying this address closed an account, and when. It is what gives a purchase back if you ever sign up again on the same address.

Then you are signed out, and the address can be used to sign up again from scratch. A new account starts with none of the old one visible. If you would rather the marked rows were really gone as well, write to [email protected] and they will be deleted.

The same page carries a smaller version: a reset that clears your answers, runs and reviews and keeps the account, for starting the study over without losing your sitting date.

How long any of it is kept

Everything in the first table is kept until you close the account, and then it goes the way the three rows above describe. There is no schedule on either side of that: nothing expires, and nothing is swept up, so an account left alone for a year is still there when its owner comes back.

Two things outlive a closure. The first is the record of the payment, held as the payment provider sent it, naming the transaction, the product and the account it was bought for. It is never deleted, because it is what lets a purchase be given back on the same address, and because a business has to be able to show what it was paid. The second is the study rows, marked rather than deleted, so a closure somebody regrets can be undone. Neither is used for anything else, and neither carries your name.

What Google Analytics recorded sits with Google under that property, not here, and closing an account does not reach it. It was never joined to your account in the first place.

Asking for it, or asking for it to go

The profile page has both: a reset that clears your progress and keeps the account, and a close that ends the account. If you would rather have a copy of what is held, or want something removed that those two buttons do not reach, write to [email protected].

Canada's federal Personal Information Protection and Electronic Documents Act gives you the right to ask what is held about you and to have a mistake corrected. Asking at that address is how. If a request is refused, the Office of the Privacy Commissioner of Canada is who to take it to.