Privacy Policy

Last updated: October 11, 2026

This is a plain-language description of how DataCertPrep handles personal data today. It is not a lawyer-drafted document. If anything here is unclear, email support@datacert-prep.com.

Who we are

DataCertPrep (datacert-prep.com) is an online certification prep service. Questions about this policy or your data go to support@datacert-prep.com.

What we collect

• Account details — your email address, and your name and profile picture if you sign in with Google.
• Sign-in records — the link between your account and Google, and short-lived one-time tokens for email sign-in links.
• Study activity — the courses you enrol in (and any target exam date you set), your answers to practice questions, mock exam sessions and scores, and flashcard reviews. This powers your dashboard and progress tracking.
• Things you post— comments in question discussions and testimonials you submit. Discussion comments are shown alongside the question with your account name and can be seen by anyone viewing that question's discussion; published testimonials can appear on public pages with your account name.
• Billing — if you subscribe, your plan and Stripe customer ID. Payment details are handled by Stripe.
• Usage and technical data — pages visited and performance measurements (Vercel Analytics, Speed Insights and Google Analytics), and standard server logs kept by our host.

Why we use it

• To run your account and sign you in.
• To provide the service: save your progress, score mock exams and schedule flashcard reviews.
• To take payments and keep your plan in sync with your subscription.
• To understand which pages are used and to fix slow or broken pages.
• To answer your emails and fix errors you report.

We don't sell your personal data, and we don't use it for advertising.

Who processes it

DataCertPrep uses these service providers, each under its own terms and privacy policy:

• Vercel

  Hosts the website and its servers. Vercel Web Analytics and Speed Insights measure page views and page performance without cookies; Vercel says visitors are identified by a hash of the request that is discarded after 24 hours.

• Neon

  Hosts the Postgres database that stores your account and study progress.

• Google

  “Sign in with Google” (we receive your name, email address and profile picture), and Google Analytics, which measures how the site is used.

• Resend

  Sends the one-time sign-in link when you sign in with your email address.

• Stripe

  Processes subscription payments on its own checkout and billing pages. Your card details go to Stripe, not to us; we keep your Stripe customer ID and plan.

These providers may store and process data outside your country, including in the United States and Australia.

Cookies and local storage

• Sign-in cookies (Auth.js: authjs.session-token, authjs.csrf-token, authjs.callback-url, with secure prefixes on https) — keep you signed in and protect sign-in forms. They are needed for the site to work.
• Google Analytics cookies (_ga, _ga_*) — measure visits when Google Analytics is enabled.
• Local storage in your browser — your light/dark theme choice, study-guide checklist ticks and cheat-sheet progress. These stay on your device and are not sent to us.

Stripe sets its own cookies on its checkout and billing pages. You can block or delete cookies in your browser settings; if you block sign-in cookies you won't be able to stay signed in.

How long we keep it

Account and study data are kept while your account exists. If you ask us to delete your account, we delete your account and the study activity, comments and testimonials linked to it. Stripe keeps its own payment records as required by law.

Your choices and rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account by emailing support@datacert-prep.com from the address on your account. You can cancel a subscription at any time from Manage billing on your dashboard. Depending on where you live, you may also have the right to complain to your local data protection authority.

Changes

If we change how we handle personal data — for example by adding a new service provider — we'll update this page and the date at the top. See also the terms of service.