Privacy Policy

Effective June 12, 2026

The short version

  • We collect only what the product needs to work.
  • We do not sell your personal data, and we do not share it for advertising.
  • Analytics are cookieless and self-hosted; no tracking cookies.
  • You can export or permanently delete your data yourself, any time, from account settings.

What we collect

  • Account data: email address, name, password hash (or your Google, Apple, or Facebook account identifier if you sign in with one of those).
  • Study data: your answers, attempt history, and per-topic progress. This is the product; it exists so your dashboard and readiness tracking work.
  • Purchase records: what you bought, when, and its Stripe transaction reference. Card details go directly to Stripe and never touch our servers.
  • Aggregate analytics: cookieless page and event counts via self-hosted Umami. These are not tied to your account.

Cookies

We use essential cookies only: your sign-in session, and the cookies Stripe sets during checkout for fraud prevention. There are no advertising or cross-site tracking cookies, which is why there is no cookie banner.

Who processes data for us

Railway (hosting and database, United States), Stripe (payments), Resend (transactional email), Sentry (error monitoring), and Cloudflare (content delivery). Each receives only what its job requires.

Your rights

Wherever you live (including under GDPR and US state privacy laws such as the CCPA), you can access, export, correct, or delete your personal data. Export and deletion are self-serve in account settings; deletion is permanent and takes effect immediately. For anything else, email support@statewiseexams.com and we will respond within 30 days.

Retention and security

We keep your data while your account exists. Deleting your account removes your personal data; purchase records required for tax and accounting are retained in anonymised form. Data is encrypted in transit, stored on managed infrastructure in the United States, and access is limited to what operating the service requires.

Changes

If this policy changes materially, we will announce it on the site or by email before the change takes effect.