Privacy Policy

This Privacy Policy explains how Prep Den (“Prep Den”, “we”, “us”) collects, uses, and protects information when you use our website at prepden.com and the services offered through it (the “Service”). By using the Service you agree to the practices described below.

1. Information we collect

1.1 Information you provide

• Account information: when you create an account we collect your email address and a password (which is stored only as a salted hash by our authentication provider).
• Purchase information: when you buy a study guide we collect the products purchased, purchase date, amount paid, and an associated transaction reference. We do not see or store full payment card numbers — those are handled directly by Stripe.
• Communications: if you contact us by email we keep a record of the message and our reply.

1.2 Information collected automatically

• Usage data: pages viewed, study activity (e.g., which flashcards and quiz questions you have viewed), browser type, device type, approximate location derived from IP address, and timestamps. We record per-guide flashcard and quiz views to evaluate refund eligibility under our Refund Policy (which considers a guide “substantially accessed” once more than 20% of its flashcards or quiz questions have been viewed).
• Cookies and similar technologies: we use a small number of strictly-necessary cookies to keep you signed in and to remember your preferences. We do not use advertising cookies.

2. How we use information

• To provide, maintain, and improve the Service.
• To process purchases and grant access to the guides you have bought.
• To send transactional emails (e.g., purchase receipts, password resets).
• To detect, prevent, and address fraud, abuse, or technical issues.
• To comply with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

3. Service providers

We share limited information with the following providers, who act as data processors on our behalf and are bound by contract to keep your information confidential:

• Supabase — authentication, database hosting, and session management.
• Stripe — payment processing. Stripe's own privacy policy applies to information you provide during checkout.
• Vercel — website hosting and content delivery.

4. International transfers

Our service providers may store and process your information in countries outside your own. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Data retention

We retain account and purchase information for as long as your account remains active and for a reasonable period afterwards to comply with tax, accounting, and legal obligations. You may request deletion of your account at any time (see “Your rights” below).

6. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your account and associated data;
• object to or restrict certain processing;
• request a copy of your data in a portable format;
• withdraw consent where processing is based on consent.

To exercise any of these rights, email support@prepden.com. Note that some information must be retained to fulfil legal obligations even after an account is closed.

7. Children's privacy

The Service is intended for students aged 13 and over. If you are under 18 you should review this Policy with a parent or guardian and obtain their consent before creating an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

8. Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, and access controls to protect your information. No internet service can guarantee absolute security, and you are responsible for keeping your account credentials confidential.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated by updating the effective date above and, where appropriate, notifying you by email or through the Service.

10. Contact

Questions about this Policy or our data practices? Email support@prepden.com.