Privacy

Effective August 12, 2026

Information we receive

Polar is the merchant of record and may provide order, email, product, refund, and delivery information needed to fulfill and support a purchase. CertWrench A&P does not receive or store your full payment-card number. A study account stores an account identifier, email address, purchased ratings, recovery status, preferences, and flashcard readiness progress. If you join the physical deck release list, we receive your email address, rating interest, consent time, and basic source information. If you contact support, we receive your address and message. Spoken-practice recordings remain in the current browser session and are not received by CertWrench A&P.

Sign-in

Supabase provides account authentication and data storage. Email sign-in codes are delivered through the configured mail provider. If you choose Sign in with Google, Google confirms your identity to Supabase; CertWrench A&P does not receive your Google password. Google sign-in is optional, and email-code sign-in remains available.

Private AKTR import

An AKTR PDF or image is read inside your browser. The report file, filename, full extracted text, score, FTN, identity details, and expected test date are not uploaded to CertWrench A&P or placed in product analytics. When you build or confirm a plan, the recognized ACS Knowledge codes may be saved in that browser. If you are signed in, those normalized codes may also be saved as an account preference so the plan can follow you to another device. You may clear the saved plan from the AKTR Study Plan controls.

Spoken answer recording

If you choose Record answer, your browser asks for microphone access and keeps the recording only in the current practice session so you can replay or replace it. The audio is not uploaded, synchronized to another device, saved to your study account, or included in product analytics. It is removed when you delete it, leave the attempt, complete the session, sign out, or close the page. CertWrench does not transcribe or automatically grade the recording.

How information is used

We use information to connect purchases, control library access, save and synchronize progress, deliver files, provide requested physical-deck notices, answer support requests, issue refunds, prevent abuse, keep security records, measure the product at an aggregate level, meet accounting duties, and comply with law. First-party product measurement uses random event and browser-session identifiers, a coarse acquisition channel, and a small allowlist of product, placement, rating, mode, access type, sign-in method, readiness-result band, advertising platform, campaign, and creative labels. A readiness-result band is a broad category such as a strong start, keep building, or focus first; it is not an exam prediction and does not include the questions or answers. Advertising labels are retained only when they exactly match a campaign configured by CertWrench; anything else is reduced to a fixed unknown label. Product analytics are not linked to a study account. On study screens, anonymous active-use minute signals are counted only while the page is visible, focused, and recently active; they estimate engagement rather than exact time-on-site. A random session identifier may be passed to Polar as a checkout reference so completed orders can be reconciled with checkout intent. Entered AKTR codes, expected test dates, report contents, flashcard answers, card identifiers, card text, email addresses, IP addresses, advertising click IDs, raw referral URLs, and raw or arbitrary campaign strings are not stored in product analytics. CertWrench A&P does not sell personal information or use product analytics to build third-party behavioral advertising audiences.

Advertising conversion measurement

We use the Google tag and Reddit Pixel to measure whether an ad visit leads to meaningful product use or checkout. Google or Reddit may receive or use an advertising click identifier, the page visited, and a conversion type. Google may also receive the selected product, order value, and a non-email transaction identifier after our service verifies a Polar checkout. We do not send either advertising provider your CertWrench account email, Google sign-in email, AKTR report, AKTR codes, flashcard answers, card text, study progress, or full payment-card information. The Reddit Pixel does not report purchases from the browser. Advertising-personalization signals are disabled in our Google tag, and the Reddit Pixel is not loaded when the browser exposes a Global Privacy Control or Do Not Track signal.

Service providers

Polar provides checkout and file delivery. Cloudflare provides site delivery, protected content storage, request processing, and security. Supabase provides authentication and account data storage. Google provides optional Google sign-in and Google Ads conversion measurement. Reddit provides advertising conversion measurement. Zoho Mail provides authentication and customer-support email. Each provider processes information under its own terms and privacy policy.

Device storage and security

The study site may use browser storage to keep a public sample session, preserve unsynchronized progress, maintain sign-in state, and prevent duplicate conversion reporting on the same device. When a visitor arrives through a configured advertising campaign, CertWrench may keep the approved platform, campaign, and creative labels in first-party browser storage for up to 30 days so a later purchase in the same browser can be credited to that campaign. This stored label does not contain an IP address, email address, advertising click ID, or raw URL. Google Ads and Reddit measurement may use cookies or similar browser storage to attribute an ad click or view to a later product action. Ordinary request information such as IP address, device information, time, and requested route may be processed for delivery, rate limiting, and security. You may limit cookies in your browser settings. We use reasonable safeguards, but no online system can promise absolute security.

Your choices and retention

You may unsubscribe from physical-deck email at any time. You may delete a study account from the account controls or contact support@certwrench.com for access, correction, deletion, or another privacy request. Account progress and preferences are deleted with the account. Anonymous product events are retained for no more than 13 months. Some order, refund, security, and support records may be retained for tax, fraud-prevention, dispute, or legal purposes.