What is stored, and what is not

Catholic School Prep is published by Northpine Labs LLC, registered in Wyoming, United States. For anything on this page, including a request to delete something, write to [email protected].

This is the largest part of the site and it is worth stating first. Answering questions signed out writes no row anywhere. The set you are given is chosen by a number in the address bar, which is why reloading gives you the same ten questions — that number is the whole of the memory, and it is in your own browser’s address bar rather than on a server.

Accounts exist for two things: the mock papers you have bought, and the course, which needs to remember what has already been answered in order to choose what to do next. An account is for a parent or guardian to create. Signing in is handled by Clerk, which stores the email address and the password or sign-in method; we never see a password.

While signed in, each answered question writes one row: which account, which question, which subtest and topic it belongs to, whether it was right, and when. That is the entire row. There is no name, no age, no school, no location, nothing that was typed, and no record of how long anything took.

That list is used to choose the next session, to bring back a question that was got wrong, and to show where the marks went. It is not used to estimate an ability, and no score is predicted from it — neither exam publisher releases the tables that would make such a number mean anything.

Payment happens on Stripe’s own page. No card number, expiry date or security code ever reaches this site, and there is no card field anywhere in it. What we store afterwards is the Stripe session identifier, the email address Stripe collected for the receipt, which exam was bought, the amount and the date — enough to know that you have access, and nothing more.

A cookie holds that session identifier so the papers open on the device you bought on. It grants nothing by itself: access comes from finding that identifier in our records.

We store the address you gave, which exam you asked about, and a token that unsubscribes it. No name is asked for and none is stored. You will get one message immediately with the date in it, and one before the deadline, and then nothing. Every message carries a one-click unsubscribe, and using it deletes the address rather than flagging it.

We count page views and a short list of named events — a practice set begun, a set finished, the price reached, a purchase — using PostHog. This tells us whether the site works, which is the only question it is asked.

Two features that analytics tools normally switch on by default are switched off here on purpose, and both are refusals about children rather than settings. Automatic click capture is off, because on a practice page the thing being clicked is an answer choice, and capturing it would send the contents of the questions to a third party every time a child answered. Session recording is off unconditionally, because a recording of this site would be a video of a child sitting a test.

Nothing is linked to a person in the analytics: no identifier from your account is ever sent to it.

There are three, and none of them advertises anything. One remembers that you are using the course, so the front page sends you there instead of to the sales pages. One holds the purchase identifier described above. One is Clerk’s sign-in cookie and only exists once you have signed in. There is no advertising cookie, no tracking pixel and no third-party ad network on this site at all.

This site is meant to be used by an eighth grader, with an account created and paid for by their parent or guardian. It is not directed at children under 13 and an account should not be created by one.

If a parent or guardian wants everything associated with a child’s practice removed, write and say so, and it will be deleted rather than deactivated. Deleting a learner is a single operation in this system precisely so that it is easy to do and impossible to do partially.

Four companies, each doing one job: Clerk for sign-in, Stripe for payment, Resend for the reminder email, and PostHog for the counts above. Our servers and database are hosted on Railway. Nobody is sent anything for advertising, nothing is sold, and there is no data broker in this list because there is no arrangement with one.

A purchase record is kept while it entitles you to something and for as long as tax and accounting rules require afterwards. Practice history is kept while the account exists. A reminder address is deleted when the reminder has been sent and the season is over, or the moment you unsubscribe, whichever is first.

You can ask for a copy of what is held about you, or ask for it to be deleted, by writing to [email protected]. There is no form and no verification hoop beyond establishing that the address is yours.

The date at the top is the date the wording last changed, typed by hand rather than generated, so that it means something. If what is stored ever changes materially, this page changes first. The terms are separate and cover what you may do with the questions.