Privacy Policy

Last updated: April 2026

CertCrush (“we”, “us”, or “our”) operates certcrush.app. This Privacy Policy explains how we collect, use, and protect your information when you use our certification exam preparation platform.

1. Information We Collect

Account information

When you create an account, we collect your email address and display name. If you sign in with Google, we receive your name and email address from Google's authentication service.

Usage data

We record your exam attempts, scores, answers, and time spent studying. This data powers your progress dashboard and performance analytics.

Technical data

We collect standard web logs including IP address, browser type, and pages visited. This information is used to maintain security and improve the service.

2. How We Use Your Information

  • Provide, operate, and maintain your account and study progress
  • Display your performance analytics and domain scores
  • Send important account and service notifications
  • Prevent fraud and enforce our Terms of Service
  • Improve the platform based on aggregate usage patterns

3. Information Sharing

We do not sell, rent, or trade your personal information. We share data only with:

  • Supabase — our database and authentication provider. Your data is stored in their infrastructure subject to their privacy policy.
  • Stripe — our payment processor. When you make a purchase or manage your subscription, your payment details are handled directly by Stripe and are subject to Stripe's Privacy Policy. We store only a Stripe customer ID to link your account to your purchases.
  • Google — only if you choose to sign in with Google. We receive only your name and email.
  • Legal requirements — if required by law or to protect the rights and safety of our users.

4. Cookies & Local Storage

We use only strictly necessary cookies — those required for the service to function. We do not use advertising, analytics, or tracking cookies.

Authentication session cookiesEssential

Set by Supabase to keep you logged in across page loads. Without these, you would need to sign in on every page.

Payment session cookiesEssential

Set by Stripe during checkout to process payments securely. These are active only during the payment flow.

Theme preference (localStorage)Functional

Stored in your browser's local storage (not a cookie) to remember your light/dark mode preference.

Cookie notice dismissal (localStorage)Functional

Stored in local storage to remember that you have acknowledged this cookie notice.

Because all cookies we use are strictly necessary, we do not offer a cookie opt-out — disabling them would prevent core features (login, payments) from working. You can manage cookies at any time through your browser settings.

5. Data Retention

We retain your account and study data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where we are required to retain it by law.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your study data in a portable format
  • Withdraw consent to data processing at any time

To exercise any of these rights, contact us at privacy@certcrush.app.

7. Children's Privacy

CertCrush is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of CertCrush after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: privacy@certcrush.app