Privacy policy

Launch preparation version: before accepting payments, the operator must provide its legal business identity, contact details and applicable refund policy.

Information we use

Your signed-in identity connects you to your orders. An email address may be sent to the payment platform for receipts. The server stores the exam identifier, access term, payment order ID, payment time and expiry time.

Accounts and verification emails

Supabase Auth processes email, passwords and verification codes. Resend delivers account emails. The website does not store plaintext passwords. Sessions use secure cookies and encrypted server-side tokens. Resetting a password revokes previous website sessions.

Payments

Payments take place on Stripe-hosted checkout. This website does not store card numbers. Payment notifications activate or revoke download access.

Storage and access

PDFs and order records are kept in private server storage. Download requests are checked against your identity and order validity. This version does not add advertising trackers or third-party analytics scripts.

Data requests

Before opening sales, the operator must publish contact channels for data access, correction and deletion, together with retention periods.