Privacy

What this site holds about you

Listed rather than described, because a list can be checked against the database and a paragraph cannot.

No analytics, and nothing sold

This site runs no analytics, no advertising, no tracking pixel and no third-party script that watches you read. Nothing about you is sold, and nothing is shared with anybody who is not named further down. You can see what is held, clear it, or close the account entirely, from the profile page, without asking anybody.

What an account holds

What	Why it is there
Your email address and password	To sign you in. The password is stored hashed and nobody here can read it.
Your first and last name	Asked for at sign-up, so pages can address you rather than your email.
Your sitting date, if you give one	The dashboard counts down to it and the flashcard schedule fits itself around it.
Every answer you record, and when	Your scores, your weak areas, and the drills that redo what you got wrong.
Your mock exam runs and their results	So a run survives a closed tab and a result survives a reload.
Your flashcard reviews and their schedule	The spacing between cards is the whole of what a flashcard deck does.
Whether you have paid, and the Paddle transaction id	To unlock the bank, and to give a purchase back if you close the account and sign up again on the same address.

What the browser holds without an account

The free practice pages record which questions you have answered in your browser's own storage, so a page you come back to remembers where you were. It never leaves the browser until you make an account, and if you do, it is carried into the new account so the practice you already did counts. Clearing your browser data clears it.

The signed-in session is kept in the same browser storage rather than in a cookie. This site sets no cookies of its own.

Who else sees any of it

Who	What they hold
Supabase	The database and the sign-in service. Everything in the table above is held there.
Paddle	Payment. Paddle is the merchant of record, so it takes your billing details and card directly. BrokerExam receives the transaction id and whether it succeeded, and never sees a card number.
Cloudflare	Serving the pages. It sees the requests any web host sees.

How long any of it is kept

Until you close the account. Closing it removes your sign-in and marks your study data as closed, and a later sign-up on the same address starts with none of it visible.

Two things outlive a closure, and both on purpose. The record of a payment, because it is what lets a purchase be given back if you sign up again on the same address, and because a business has to be able to show what it was paid. And the study rows themselves, marked closed rather than deleted, so a mistaken closure can be undone. Neither is used for anything else, and neither carries your name.

Asking for it, or asking for it to go

The profile page has both: a reset that clears your progress and keeps the account, and a close that ends the account. If you would rather have a copy of what is held, or want something removed that those two buttons do not reach, write to support@brokerexam.ca.

Canada's federal Personal Information Protection and Electronic Documents Act gives you the right to ask what is held about you and to have a mistake corrected. Asking at that address is how.