Privacy Policy
This Privacy Policy explains what personal information WetzelWisdom ("WetzelWisdom," "we," "us") collects when you use www.wetzelwisdom.com and the practice test service offered through it (the "Service"), how we use that information, and the choices available to you.
1. Information We Collect
Information you provide
- Account information: your name, email address, and a hashed copy of your password.
- Purchase information: the tests you have purchased and the date of purchase. Full payment card details are entered on Stripe's hosted checkout page and are not received or stored by us; we only receive a purchase confirmation and the last four digits of your card for our own records.
- Test activity: the questions you have answered, your selected answers, and your scores, so we can show your results on your dashboard.
- Support correspondence: if you email us, we retain your message and email address so we can respond.
Information collected automatically
- Session data: when you sign in, we issue a JSON Web Token (JWT) that is stored in your browser's local storage to keep you signed in. This token contains your user ID, email, and name.
- Server logs: our hosting providers record basic request metadata such as IP address, user agent, timestamp, and URL for security, debugging, and abuse prevention. This data is automatically purged after a short retention period.
2. How We Use Your Information
- To create and maintain your account and authenticate you.
- To deliver the practice tests you have purchased and record your results.
- To send transactional emails such as password resets, purchase confirmations, and important account or service notices.
- To respond to support inquiries.
- To detect, prevent, and investigate fraud or abuse.
- To comply with legal obligations.
We do not sell your personal information. We do not use your personal information to train machine learning models. We do not currently send marketing emails; if that changes, we will update this policy and give you the ability to opt out.
3. Third-Party Service Providers
We use the following third parties to operate the Service. Each processes personal information only as needed to provide its service to us and under its own privacy terms.
| Provider | Purpose | Data shared |
|---|---|---|
| Microsoft Azure (Static Web Apps, Azure Functions, Cosmos DB, Application Insights) | Website hosting, application backend, database, error monitoring | All account and test data; server-side telemetry |
| Stripe | Payment processing | Email, name, purchase amount, payment card details (collected directly by Stripe) |
| Resend | Transactional email delivery (password resets, receipts) | Email address, recipient name, email contents |
4. Cookies and Similar Technologies
We do not use advertising or analytics cookies. We use browser local storage to store the session token that keeps you signed in. Clearing your browser storage will sign you out.
5. Data Retention
We keep your account and purchase records while your account is active and for a reasonable period afterward to comply with tax, accounting, and legal obligations. Server logs are retained for up to 90 days. Email delivery logs are retained by Resend according to their policy. You may request deletion of your account at any time (see Section 7).
6. Data Security
Passwords are hashed using scrypt with a per-user random salt before they are stored; plaintext passwords are never written to disk. Data in transit is encrypted with TLS. Production credentials and API keys are stored as managed secrets and rotated when compromised. No system is perfectly secure; in the unlikely event of a breach affecting your information, we will notify you as required by applicable law.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Request deletion of your account and associated personal information;
- Object to or restrict certain processing;
- Receive a copy of your information in a portable format;
- Withdraw consent where processing is based on consent.
To exercise any of these rights, email privacy@wetzelwisdom.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
8. California Residents (CCPA/CPRA)
If you are a California resident, you have the rights described in Section 7 with respect to your personal information, plus the right not to be discriminated against for exercising them. We do not sell or "share" your personal information for cross-context behavioral advertising as those terms are defined under California law.
9. EU, UK, and EEA Residents (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, WetzelWisdom is the data controller for personal information collected through the Service. Our legal bases for processing are (a) performance of a contract with you (delivering the Service), (b) our legitimate interests in securing and improving the Service, and (c) your consent where required. You have the right to lodge a complaint with your local supervisory authority. Data may be transferred to and processed in the United States, where most of our service providers operate.
10. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, email privacy@wetzelwisdom.com and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by sending a notice to registered users. Continued use of the Service after an update constitutes acceptance of the revised policy.
12. Contact
Privacy questions or requests: privacy@wetzelwisdom.com.
General support: support@wetzelwisdom.com.