Privacy Policy

Last updated: 2026-05-08

We try to collect as little data as we can while still running the service. Here's what we store, why, and who we share it with.

What we collect

  • Account info: name, email, hashed password (or OAuth identity from Google).
  • Practice data: the scenarios you generate, your answers, and AI grading feedback. This stays linked to your account.
  • Usage counters: daily session and generation counts, used to enforce free-tier limits.
  • Billing: Stripe handles all card data. We store a Stripe customer ID and subscription status.
  • Server logs: standard request logs (IP, user agent, route) retained briefly for security and debugging.
  • Video practice recordings (opt-in only): if you choose to save a recording from video practice, it is uploaded to our storage provider and automatically deleted after 30 days. By default, recordings stay in your browser and are discarded when you leave the page. Your self-ratings (numbers only, no video) are kept indefinitely so your score trend persists, and can be deleted from your history at any time.

What we don't collect

  • We don't use third-party advertising trackers.
  • We don't sell your data.
  • We don't store payment card numbers — Stripe does.

Who processes your data

  • Anthropic — your scenarios and answers are sent to the Claude API for generation and grading. Anthropic's privacy terms apply to that processing.
  • Stripe — payment processing.
  • Resend — transactional email (sign-up, password reset, etc.).
  • Cloudflare R2 — storage for video-practice recordings you opt to save. Objects auto-expire after 30 days.

Your rights

You can export or delete your data at any time by contacting us via the contact page. If you delete your account, we delete your practice history and personal data within 30 days (we may retain billing records longer where legally required).

Cookies and analytics

We use a first-party session cookie to keep you signed in.

We also use two analytics tools to understand how the site is used in aggregate — Google Analytics and PostHog. These set cookies and record which pages are visited, which we use to see what people find useful and where they get stuck. We do not sell your data, we do not run advertising trackers or retargeting pixels, and we do not use session recording or device fingerprinting. Your practice answers are never sent to either tool.

You can opt out of analytics entirely by enabling “Do Not Track” or an ad/tracker blocker in your browser; the site works exactly the same either way.

Contact

Questions about this policy? Reach out via the contact page.