Privacy Policy

What we collect

• Server logs (IP, user agent) for security and rate limiting.
• Google Analytics 4 usage metrics for aggregate traffic, engagement, and performance reporting.
• Optional contact email if you reach out for support.

What we do not collect

• No practice answers are tied to your identity.
• No passwords are required for public practice modes.
• No sale of personal data.

Storage and cookies

• Practice progress, bookmarks, mistakes, and streaks are stored in your browser using localStorage.
• Admin login uses an HttpOnly JWT cookie.
• Public practice does not require sign-in cookies beyond security and consent-related behavior.

Ads and third parties

• We use Google AdSense to show ads on non-legal public pages.
• For visitors in the EEA, UK, and Switzerland, Google Funding Choices manages ad and analytics consent choices.
• When consent is required, Google Consent Mode applies region-aware defaults before Google tags are configured.
• Our privacy policy page does not load AdSense or Funding Choices tags.

Managing your consent choices

You can reopen the Google privacy and cookie settings prompt from any non-legal page using the footer link labeled Privacy & cookie settings.

If you are reading this page and want to update your consent choices now, use this privacy settings link.

Data retention

Server logs rotate periodically. Locally stored progress stays on your device until you clear your browser data.

Contact

For privacy questions: [email protected]