Privacy

Effective July 20, 2026

Information we receive

Polar is the merchant of record and may provide order, email, product, refund, and delivery information needed to fulfill and support a purchase. CertWrench A&P does not receive or store your full payment-card number. A study account stores an account identifier, email address, purchased ratings, recovery status, preferences, and flashcard readiness progress. If you join the physical deck release list, we receive your email address, rating interest, consent time, and basic source information. If you contact support, we receive your address and message.

Sign-in

Supabase provides account authentication and data storage. Email sign-in codes are delivered through the configured mail provider. If you choose Sign in with Google, Google confirms your identity to Supabase; CertWrench A&P does not receive your Google password. Google sign-in is optional, and email-code sign-in remains available.

Private AKTR import

An AKTR PDF or image is read inside your browser. The report file, filename, full extracted text, score, FTN, and identity details are not uploaded to CertWrench A&P or placed in product analytics. If you confirm a study plan while signed in, only the recognized ACS Knowledge codes are saved as an account preference so the plan can follow you to another device.

How information is used

We use information to connect purchases, control library access, save and synchronize progress, deliver files, provide requested physical-deck notices, answer support requests, issue refunds, prevent abuse, keep security records, measure the product at an aggregate level, meet accounting duties, and comply with law. Product measurement uses random event and browser-session identifiers, a coarse acquisition channel, and a small allowlist of product, placement, rating, mode, access type, and sign-in-method labels. It is not linked to a study account. On study screens, anonymous active-use minute signals are counted only while the page is visible, focused, and recently active; they estimate engagement rather than exact time-on-site. A random session identifier may be passed to Polar as a checkout reference so completed orders can be reconciled with checkout intent. Entered AKTR codes, flashcard answers, card identifiers, card text, email addresses, IP addresses, raw referral URLs, and raw campaign strings are not stored in product analytics. CertWrench A&P does not sell personal information or use it for third-party behavioral advertising.

Service providers

Polar provides checkout and file delivery. Cloudflare provides site delivery, protected content storage, request processing, and security. Supabase provides authentication and account data storage. Google is used only when a user chooses Google sign-in. Zoho Mail provides authentication and customer-support email. Each provider processes information under its own terms and privacy policy.

Device storage and security

The study site may use browser storage to keep a public sample session, preserve unsynchronized progress, and maintain sign-in state. Ordinary request information such as IP address, device information, time, and requested route may be processed for delivery, rate limiting, and security. We use reasonable safeguards, but no online system can promise absolute security.

Your choices and retention

You may unsubscribe from physical-deck email at any time. You may delete a study account from the account controls or contact support@certwrench.com for access, correction, deletion, or another privacy request. Account progress and preferences are deleted with the account. Anonymous product events are retained for no more than 13 months. Some order, refund, security, and support records may be retained for tax, fraud-prevention, dispute, or legal purposes.