Privacy Policy
This Privacy Policy explains what personal information WetzelWisdom ("WetzelWisdom," "we," "us") collects when you use www.wetzelwisdom.com, the practice test service offered through it, and the WetzelWisdom Azure Labs browser extension (together, the "Service"), how we use that information, and the choices available to you.
1. Information We Collect
Information you provide
- Account information: your name, email address, and a hashed copy of your password.
- Purchase information: the tests you have purchased and the date of purchase. Full payment card details are entered on Stripe's hosted checkout page and are not received or stored by us; we only receive a purchase confirmation and the last four digits of your card for our own records.
- Test activity: the questions you have answered, your selected answers, and your scores, so we can show your results on your dashboard.
- Support correspondence: if you email us, we retain your message and email address so we can respond.
Information collected automatically
- Session data: when you sign in, we issue a JSON Web Token (JWT) that is stored in your browser's local storage to keep you signed in. This token contains your user ID, email, and name.
- Server logs: our hosting providers record basic request metadata such as IP address, user agent, timestamp, and URL for security, debugging, and abuse prevention. This data is automatically purged after a short retention period.
2. How We Use Your Information
- To create and maintain your account and authenticate you.
- To deliver the practice tests you have purchased and record your results.
- To send transactional emails such as password resets, purchase confirmations, and important account or service notices.
- To respond to support inquiries.
- To detect, prevent, and investigate fraud or abuse.
- To comply with legal obligations.
We do not sell your personal information. We do not use your personal information to train machine learning models. We do not currently send marketing emails; if that changes, we will update this policy and give you the ability to opt out.
3. Third-Party Service Providers
We use the following third parties to operate the Service. Each processes personal information only as needed to provide its service to us and under its own privacy terms.
| Provider | Purpose | Data shared |
|---|---|---|
| Microsoft Azure (Static Web Apps, Azure Functions, Cosmos DB, Application Insights) | Website hosting, application backend, database, error monitoring | All account and test data; server-side telemetry |
| Stripe | Payment processing | Email, name, purchase amount, payment card details (collected directly by Stripe) |
| Resend | Transactional email delivery (password resets, receipts) | Email address, recipient name, email contents |
4. Cookies and Similar Technologies
We do not use advertising or analytics cookies. We use browser local storage to store the session token that keeps you signed in. Clearing your browser storage will sign you out.
5. WetzelWisdom Azure Labs Browser Extension
The WetzelWisdom Azure Labs extension for Chrome and Edge provides hands-on Azure training labs that run in your own Microsoft Azure subscription. This section describes data practices specific to the extension.
Microsoft sign-in
The extension signs you in through Microsoft's official OAuth 2.0 service (login.microsoftonline.com). Your Microsoft password is entered only on Microsoft's sign-in page and is never seen, transmitted to, or stored by WetzelWisdom. The extension receives delegated access tokens, which are stored locally in your browser's extension storage and sent only to Microsoft's APIs. Signing out of the extension deletes these tokens.
Access to your Azure environment
To deploy, guide, and verify labs, the extension calls the Azure Resource Manager API (management.azure.com) and, for identity labs, Microsoft Graph (graph.microsoft.com) — acting on your behalf, using your own credentials, against your own subscription and tenant. This traffic flows directly between your browser and Microsoft. WetzelWisdom's servers never receive your Azure credentials, tokens, subscription contents, resource data, or tenant directory data.
Lab resources the extension deploys are created in your Azure subscription and billed to you by Microsoft at your normal rates. The extension provides cleanup tooling and reminders, but you are responsible for the resources in your subscription.
Lab catalog and progress sync
The extension fetches the lab catalog from wetzelwisdom.com. If you link the extension to your WetzelWisdom account, it also syncs your lab progress — which labs you have started and completed and when — so your progress appears on your dashboard. This is associated with your account information described in Section 1. If the extension is not linked to an account, no progress data is sent to us.
Data stored on your device
The extension stores the following locally in your browser's extension storage: your Microsoft OAuth tokens, your selected Azure subscription and region, and your local lab progress. This data never leaves your device except as described above. Removing the extension deletes it.
What the extension does not do
The extension contains no advertising, analytics, or tracking. It does not read your browsing history or the content of web pages you visit. It does not sell or share your personal information. Data collected by the extension is used solely to provide the lab training functionality described here and is not used or transferred for any other purpose, consistent with the Chrome Web Store User Data Policy, including its Limited Use requirements.
6. Data Retention
We keep your account and purchase records while your account is active and for a reasonable period afterward to comply with tax, accounting, and legal obligations. Server logs are retained for up to 90 days. Email delivery logs are retained by Resend according to their policy. You may request deletion of your account at any time (see Section 8).
7. Data Security
Passwords are hashed using scrypt with a per-user random salt before they are stored; plaintext passwords are never written to disk. Data in transit is encrypted with TLS. Production credentials and API keys are stored as managed secrets and rotated when compromised. No system is perfectly secure; in the unlikely event of a breach affecting your information, we will notify you as required by applicable law.
8. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Request deletion of your account and associated personal information;
- Object to or restrict certain processing;
- Receive a copy of your information in a portable format;
- Withdraw consent where processing is based on consent.
To exercise any of these rights, email privacy@wetzelwisdom.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
9. California Residents (CCPA/CPRA)
If you are a California resident, you have the rights described in Section 8 with respect to your personal information, plus the right not to be discriminated against for exercising them. We do not sell or "share" your personal information for cross-context behavioral advertising as those terms are defined under California law.
10. EU, UK, and EEA Residents (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, WetzelWisdom is the data controller for personal information collected through the Service. Our legal bases for processing are (a) performance of a contract with you (delivering the Service), (b) our legitimate interests in securing and improving the Service, and (c) your consent where required. You have the right to lodge a complaint with your local supervisory authority. Data may be transferred to and processed in the United States, where most of our service providers operate.
11. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, email privacy@wetzelwisdom.com and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by sending a notice to registered users. Continued use of the Service after an update constitutes acceptance of the revised policy.
13. Contact
Privacy questions or requests: privacy@wetzelwisdom.com.
General support: support@wetzelwisdom.com.