Skip to main content

Privacy Policy

Effective date: 1 October 2026

This Privacy Policy explains how Prep Den (“Prep Den”, “we”, “us”) collects, uses, and protects information when you use our website at prepden.comand the services offered through it (the “Service”). By using the Service you agree to the practices described below.

1. Information we collect

1.1 Information you provide

  • Account information: when you create an account we collect your email address and a password (which is stored only as a salted hash by our authentication provider). If you choose to sign in with Google instead, we receive your name, email address, and profile picture from Google and do not receive a password.
  • Purchase information: when you buy a study guide we collect the products purchased, purchase date, amount paid, and an associated transaction reference. We do not see or store full payment card numbers; those are handled directly by Stripe.
  • Communications: if you contact us by email we keep a record of the message and our reply.

1.2 Information collected automatically

  • Usage data:pages viewed, study activity (e.g., which flashcards and quiz questions you have viewed), browser type, device type, approximate location derived from IP address, and timestamps. We record per-guide flashcard and quiz views to evaluate refund eligibility under our Refund Policy (which considers a guide “substantially accessed” once more than 20% of its flashcards or quiz questions have been viewed).
  • IP addresses: besides deriving an approximate location, we briefly store IP addresses to limit repeated requests to features such as sign-in, checkout, and code redemption, and to prevent abuse.
  • Cookies and similar technologies:we use a small number of strictly-necessary cookies to keep you signed in. We also use your browser's local storage to remember things such as your cart, your place in a guide, and your best game scores; that information stays on your device. We do not use advertising cookies or advertising trackers.

2. How we use information

  • To provide, maintain, and improve the Service.
  • To process purchases and grant access to the guides you have bought.
  • To send transactional emails (e.g., a welcome email, purchase receipts, password resets).
  • To detect, prevent, and address fraud, abuse, or technical issues.
  • To comply with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

3. Service providers

We share limited information with the following providers, who act as data processors on our behalf and are bound by contract to keep your information confidential:

  • Supabase: authentication, database hosting, and session management.
  • Stripe: payment processing. Stripe's own privacy policy applies to information you provide during checkout.
  • Vercel: website hosting, content delivery, and usage analytics. The analytics count page views and actions such as starting a practice test or a checkout. They do not use cookies and do not include your name, email address, or account ID.
  • Resend: delivery of the emails we send you, such as your welcome email and password reset messages. Resend receives your email address and the content of those emails.
  • Cloudflare: the Turnstile security check on our sign-in, sign-up, and password reset forms, which tells real visitors from automated traffic. Cloudflare receives your IP address and technical information about your browser and device.

If you choose to sign in with Google, Google verifies your identity and learns that you signed in to Prep Den. Google handles that information as an independent service under its own privacy policy, not as a processor on our behalf.

4. International transfers

Our service providers may store and process your information in countries outside your own. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Data retention

We retain account and purchase information for as long as your account remains active and for a reasonable period afterwards to comply with tax, accounting, and legal obligations. You may request deletion of your account at any time (see “Your rights” below).

6. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • request correction of inaccurate information;
  • request deletion of your account and associated data;
  • object to or restrict certain processing;
  • request a copy of your data in a portable format;
  • withdraw consent where processing is based on consent.

To exercise any of these rights, email support@prepden.com. Note that some information must be retained to fulfil legal obligations even after an account is closed.

7. Children's privacy

The Service is intended for students aged 13 and over. If you are under 18 you should review this Policy with a parent or guardian and obtain their consent before creating an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

8. Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, and access controls to protect your information. No internet service can guarantee absolute security, and you are responsible for keeping your account credentials confidential.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated by updating the effective date above and, where appropriate, notifying you by email or through the Service.

10. Contact

Questions about this Policy or our data practices? Email support@prepden.com.