Privacy Policy | Cert Climb

Cert Climb ("we", "us", or "our") operates this website and the certification exam preparation services offered through it. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Cert Climb you agree to the practices described below.

Information we collect

Account information. When you sign up we collect your name and email address, and we store an authentication record with our identity provider (Supabase).
Purchase information. When you buy access to an exam, our payment processor (Stripe) collects your billing details. We never see or store your full card number — we only receive a record of which exam you purchased and the associated transaction ID.
Study activity. We store your progress, answers, and results so you can resume where you left off and so we can show your performance over time.
Technical data. Like most websites, our servers receive standard request data such as IP address, browser type, and pages visited.

How we use your information

To create and maintain your account.
To grant access to the exams you have purchased.
To track and display your study progress.
To send essential service emails (account confirmations, receipts, security alerts).
To detect, prevent, and respond to fraud, abuse, or technical issues.

Service providers

We share the minimum information necessary with third parties that help us run the service:

Supabase — authentication and database hosting.
Stripe — payment processing and subscription management.
Google— used only if you choose "Continue with Google" to sign in. We request the basic profile scopes (openid, email,profile) and receive your name, email address, and profile picture URL. We never receive your Google password and we do not request access to Gmail, Drive, Contacts, or any other Google service.
Resend — transactional email delivery (account, billing, support replies).
Vercel — application hosting and basic, privacy-friendly analytics (page views and performance metrics; no cross-site tracking).

These providers are bound by their own privacy policies and may not use your data for unrelated purposes.

Revoking Google access

If you signed in with Google, you can disconnect Cert Climb at any time from your Google account's third-party app permissions page. Revoking access stops future sign-ins via Google; to also delete your account data from Cert Climb, contact us at the email below.

Cookies

We use cookies that are strictly necessary to keep you signed in and to maintain your session. We do not currently use third-party advertising or tracking cookies.

Data retention

We keep your account and progress data for as long as your account is active. If you ask us to delete your account, we will remove your personal data from our active systems within a reasonable period, except where we are required to retain records (for example, billing records for tax purposes).

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. To exercise these rights, contact us at the email below.

Children

Cert Climb is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated through the service or by email.

Contact

Questions about this Privacy Policy? Email us at contact@certclimb.com.