Privacy Policy

Last updated: June 2026

Summary

We collect the minimum data necessary to operate the site. The vast majority of the site requires no account. We never sell your data. We never collect your full name, address, phone number, or school.

What data we collect

All visitors (no account required)

IP address — for security, rate limiting, and abuse detection. Auto-deleted after 90 days.
Anonymous pageview analytics — aggregated only, never tied to identity.
Cookies — session management and optional advertising. See our Cookie Policy.

Registered users

Email address — for one-time code delivery and account identity. Deleted when you delete your account.
Birth month and year — to calculate age for COPPA compliance and percentile grouping. Never your full birthdate.
Country and state — for regional percentile comparisons.
Test scores and answers — retained anonymously after account deletion to preserve percentile accuracy.
Saved favorites — deleted when you delete your account.

What we never collect

Full name, phone number, home address, or school name
Full birthdate (only month and year)
Payment information
Precise geolocation
Social Security or government ID numbers

Children under 13 — COPPA

We comply with the Children's Online Privacy Protection Act (COPPA). When a user's birth year indicates they are under 13, we require parental consent before creating an account. We collect the parent's email (not the student's). We never serve behavioral ads to under-13 accounts.

Parents can request deletion of their child's account at any time by emailing privacy@scholarsandparents.com.

Deleting your account

You can delete your account at any time from your Account Settings. After requesting deletion, you have 2 days to cancel. Your email and session data are permanently deleted. Test scores are retained anonymously (no link to your email) to preserve percentile accuracy for all users.

To request a full wipe including test scores, email privacy@scholarsandparents.com. We will complete full wipes within 7 days.

Third-party services

We use the following services to operate the site:

Service	What they receive
Supabase	Encrypted user data (private network)
Vercel	IP address and request headers
Resend	Email address for OTP delivery only
Upstash	Hashed OTP codes (auto-expire), rate limit counters
Google AdSense	Anonymized ad data (under-13: no tracking cookies)
Posthog	Anonymous pageview analytics (no user ID)

Your rights

Access your data — from your Dashboard → Download my data
Correct your data — from your Dashboard → Account Settings
Delete your account — from your Dashboard → Account Settings
Opt out of personalized ads — from Cookie Preferences (ads still shown, not personalized)
Full data wipe — email privacy@scholarsandparents.com