Privacy Policy

What we collect

• Your email address, used for sign-in (magic link) and account identification. If you sign in with Google, we receive the email address and name associated with your Google account.
• A username you choose, shown publicly on your comments instead of your email or name.
• Answer and progress data: which questions you've attempted, your answers, exam simulation scores, and bookmarks, so your progress is saved and your dashboard/score reports can be generated.
• Purchase records: which exam(s) you've bought full access to, and the amount paid, so we can grant and verify access. Not your card details, see below.
• Comments you post in discussion threads.

What we don't collect

• No passwords. Sign-in is passwordless (email magic link or Google OAuth), so we never receive or store a password for your account.
• No payment card data. Payments are handled entirely by Paddle, our payment processor and merchant of record. Your card number, expiry, and CVC are entered directly into Paddle's checkout and never pass through our servers. See Paddle's own privacy policy for how they handle payment data.

Cookies

We use a single essential cookie to keep you signed in (a session token set by our authentication provider). It's required for the site to know who you are between requests and isn't used for tracking or advertising. We don't currently use any third-party analytics or advertising cookies.

Who we share data with

• Paddle, to process payments (they receive your email and purchase details as merchant of record).
• Our email delivery provider, to send sign-in links.
• Google, only if you choose to sign in with Google.

We don't sell your data to anyone.

Data deletion

To request deletion of your account and associated data, email support@drillcert.com from the address on your account. We'll confirm and process the request. Note that we may need to retain purchase records for a period as required by tax and accounting obligations, even after account deletion.

Changes to this policy

If we make material changes to this policy, we'll update the effective date above.

Contact

Questions about this policy or your data? Email support@drillcert.com.