Privacy Policy
This Privacy Policy explains what personal information WetzelWisdom ("WetzelWisdom," "we," "us") collects when you use www.wetzelwisdom.com, the practice test service offered through it, and the WetzelWisdom Azure Labs browser extension (together, the "Service"), how we use that information, and the choices available to you.
1. Information We Collect
Information you provide
- Account information: your name, email address, and a hashed copy of your password.
- Purchase information: the tests you have purchased and the date of purchase. Full payment card details are entered on Stripe's hosted checkout page and are not received or stored by us; we only receive a purchase confirmation and the last four digits of your card for our own records.
- Test activity: the questions you have answered, your selected answers, and your scores, so we can show your results on your dashboard.
- Support correspondence: if you email us, we retain your message and email address so we can respond.
Information collected automatically
- Session data: when you sign in, we issue a JSON Web Token (JWT) that is stored in your browser's local storage to keep you signed in. This token contains your user ID, email, and name.
- Server logs: our hosting providers record basic request metadata such as IP address, user agent, timestamp, and URL for security, debugging, and abuse prevention. This data is automatically purged after a short retention period.
- Advertising measurement: unless ad tracking is off in your browser (see Section 4), our pages load the Meta Pixel. It sets cookies and tells Meta which of our pages you visit and when you create an account or start a checkout. When you complete a subscription, our server reports the purchase to Meta through the Meta Conversions API, along with a hashed (SHA-256) copy of your email address, your IP address, your browser's user agent, and the Meta cookie identifiers. To make that possible, we attach your IP address, user agent, and Meta cookie identifiers to your Stripe checkout session.
2. How We Use Your Information
- To create and maintain your account and authenticate you.
- To deliver the practice tests you have purchased and record your results.
- To send transactional emails such as password resets, purchase confirmations, and important account or service notices.
- To respond to support inquiries.
- To detect, prevent, and investigate fraud or abuse.
- To measure and improve our ads on Facebook and Instagram, for example to learn which ads lead to subscriptions.
- To comply with legal obligations.
We do not sell your personal information for money. Section 9 explains how California law treats the advertising cookies described in Section 4. We do not use your personal information to train machine learning models. We do not currently send marketing emails; if that changes, we will update this policy and give you the ability to opt out.
3. Third-Party Service Providers
We use the following third parties to operate the Service. Each processes personal information only as needed to provide its service to us and under its own privacy terms.
| Provider | Purpose | Data shared |
|---|---|---|
| Microsoft Azure (Static Web Apps, Azure Functions, Cosmos DB, Application Insights) | Website hosting, application backend, database, error monitoring | All account and test data; server-side telemetry |
| Stripe | Payment processing | Email, name, purchase amount, payment card details (collected directly by Stripe) |
| Resend | Transactional email delivery (password resets, receipts) | Email address, recipient name, email contents |
| Meta Platforms (Meta Pixel and Conversions API) | Measuring and improving our ads on Facebook and Instagram | Pages visited, sign-up and checkout events, Meta cookie identifiers, IP address, user agent, completed purchases with their value, and a hashed (SHA-256) email address. Meta processes this data under its own privacy policy. |
4. Cookies and Similar Technologies
We use browser local storage to store the session token that keeps you signed in. Clearing your browser storage will sign you out.
We use the Meta Pixel to measure our advertising on Facebook and Instagram. It sets Meta advertising cookies (such as _fbp, plus _fbc when you arrive from a Meta ad) and sends Meta the data described in Section 1. We do not use any other advertising or analytics cookies.
We do not load the Meta Pixel, and we do not report your purchases to Meta, if any of the following is true:
- you turn ad tracking off with the button below;
- your browser sends a Global Privacy Control (GPC) signal;
- your browser's time zone is in Europe.
Ad tracking is off in this browser.
This setting applies to the browser you are using now. If you use more than one browser or device, set it in each one.
5. WetzelWisdom Azure Labs Browser Extension
The WetzelWisdom Azure Labs extension for Chrome and Edge provides hands-on Azure training labs that run in your own Microsoft Azure subscription. This section describes data practices specific to the extension.
Microsoft sign-in
The extension signs you in through Microsoft's official OAuth 2.0 service (login.microsoftonline.com). Your Microsoft password is entered only on Microsoft's sign-in page and is never seen, transmitted to, or stored by WetzelWisdom. The extension receives delegated access tokens, which are stored locally in your browser's extension storage and sent only to Microsoft's APIs. Signing out of the extension deletes these tokens.
Access to your Azure environment
To deploy, guide, and verify labs, the extension calls the Azure Resource Manager API (management.azure.com) and, for identity labs, Microsoft Graph (graph.microsoft.com) — acting on your behalf, using your own credentials, against your own subscription and tenant. This traffic flows directly between your browser and Microsoft. WetzelWisdom's servers never receive your Azure credentials, tokens, subscription contents, resource data, or tenant directory data.
Lab resources the extension deploys are created in your Azure subscription and billed to you by Microsoft at your normal rates. The extension provides cleanup tooling and reminders, but you are responsible for the resources in your subscription.
Lab catalog and progress sync
The extension fetches the lab catalog from wetzelwisdom.com. If you link the extension to your WetzelWisdom account, it also syncs your lab progress — which labs you have started and completed and when — so your progress appears on your dashboard. This is associated with your account information described in Section 1. If the extension is not linked to an account, no progress data is sent to us.
Data stored on your device
The extension stores the following locally in your browser's extension storage: your Microsoft OAuth tokens, your selected Azure subscription and region, and your local lab progress. This data never leaves your device except as described above. Removing the extension deletes it.
What the extension does not do
The extension contains no advertising, analytics, or tracking. It does not read your browsing history or the content of web pages you visit. It does not sell or share your personal information. Data collected by the extension is used solely to provide the lab training functionality described here and is not used or transferred for any other purpose, consistent with the Chrome Web Store User Data Policy, including its Limited Use requirements.
6. Data Retention
We keep your account and purchase records while your account is active and for a reasonable period afterward to comply with tax, accounting, and legal obligations. Server logs are retained for up to 90 days. Email delivery logs are retained by Resend according to their policy. You may request deletion of your account at any time (see Section 8).
7. Data Security
Passwords are hashed using scrypt with a per-user random salt before they are stored; plaintext passwords are never written to disk. Data in transit is encrypted with TLS. Production credentials and API keys are stored as managed secrets and rotated when compromised. No system is perfectly secure; in the unlikely event of a breach affecting your information, we will notify you as required by applicable law.
8. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Request deletion of your account and associated personal information;
- Object to or restrict certain processing;
- Receive a copy of your information in a portable format;
- Withdraw consent where processing is based on consent.
To exercise any of these rights, email privacy@wetzelwisdom.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
9. California Residents (CCPA/CPRA)
If you are a California resident, you have the rights described in Section 8 with respect to your personal information, plus the right not to be discriminated against for exercising them. Our use of the Meta Pixel and Meta Conversions API (see Sections 1 and 4) may count as a "sale" or "sharing" of personal information for cross-context behavioral advertising under California law. You can opt out at any time with the button in Section 4, or by turning on Global Privacy Control in your browser, which we honor automatically.
10. EU, UK, and EEA Residents (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, WetzelWisdom is the data controller for personal information collected through the Service. Our legal bases for processing are (a) performance of a contract with you (delivering the Service), (b) our legitimate interests in securing and improving the Service, and (c) your consent where required. You have the right to lodge a complaint with your local supervisory authority. Data may be transferred to and processed in the United States, where most of our service providers operate. We do not load the Meta Pixel in browsers set to a European time zone. If it loads for you anyway (for example, while you travel outside Europe), you can turn it off with the button in Section 4.
11. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, email privacy@wetzelwisdom.com and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by sending a notice to registered users. Continued use of the Service after an update constitutes acceptance of the revised policy.
13. Contact
Privacy questions or requests: privacy@wetzelwisdom.com.
General support: support@wetzelwisdom.com.