What leaves your browser.

Your progress stays on your device

Answers, scores, streaks, XP, mastery, flagged questions, your study plan and your light/dark preference are all written to your browser's localStorage. That is a store only this site can read, it never travels with a request, and clearing your browser data erases it. No account is needed to use any feature on this site.

Keeping a copy of it

That last part cuts both ways. Nothing leaves your device, and nothing survives clearing your browser data, switching browsers, or moving to a new laptop. Signing in syncs your XP and streak; it does not carry every per-question record.

So you can take the whole thing with you as a file — everything above, as readable JSON — and put it back on any browser. Your sign-in token is deliberately left out of it: that is a live credential, and a backup should not be a way to hand over an account.

Restoring replaces what is on this browser rather than merging into it — two study histories mixed together are not a study history. You will be asked to confirm first.

One anonymous counter

Each page load increments a counter so we can see which pages get used. It records the page path and the date, and nothing else — no IP address, no cookie, no user id, no session id, no device fingerprint, no referrer. There is no way to tell two visits apart, or to tell whether a visit was yours.

It works by calling a single database function that can only do one thing: add one to a (path, day) total. The table behind it is locked so that nothing — including this website — can read it back or write to it any other way.

Site analytics

Alongside that counter we use Umami, a privacy-focused analytics service, to understand how the site is actually used — which lessons get opened, and whether people who start an exam finish it. It sets no cookies and does not track you across other websites.

It is a third party and it does collect more than our own counter does. On each page view it records:

• The page you are on and the referrer — the page or search that sent you here.
• Your browser, operating system, device type and screen size.
• Your country, worked out from your IP address. The IP address itself is not stored.
• A visitor identifier made by hashing your IP address and browser together with a secret that changes daily. This is what lets it tell one visit from another within a day. It cannot be reversed to find you, and because the secret changes, it cannot link today's visit to tomorrow's.

We also record a small number of milestones, so the site can tell whether a feature works rather than just whether it was opened: an exam being started and finished (with the score as a band such as "70-79", never an exact result), a practice session being started and finished, and a lesson being completed. No answer you give and no question you see is ever sent.

If your browser sends a Do Not Track signal, this is switched off for you entirely and nothing above is collected. Blocking it with an ad blocker or privacy extension works too, and nothing on the site depends on it.

None of this is connected to your account, your progress, or the study assistant. Umami acts as our processor and the data is never sold, shared or used for advertising.

You can also just switch it off here, for this browser, without installing anything:

Signing in is optional

If you create an account, the same progress described above is also copied to a row in our database so it follows you to another device. In that case we store:

• Your email address, used to sign you in and nothing else.
• Your progress data — the same values already on your device.

We do not email you, and the data is never sold, shared or used for advertising. Accounts and storage are handled by Supabase, acting as our processor; each account can read and write only its own row, enforced by the database rather than by the app. To delete your account and its data, email the address below and it will be removed.

What this site does not do

• No advertising, and no advertising SDKs.
• No cookies. (localStorage is not a cookie and is never transmitted.)
• No pixels, session recorders, heatmaps or A/B tools.
• No cross-site tracking: nothing here follows you to any other website.
• No selling or sharing of personal information, under CCPA or otherwise.

This list used to say "no analytics SDKs of any kind". That is no longer true, and Site analytics above says exactly what changed and what it collects.

The study assistant

The robot in the corner of every page answers by searching this site's own notes inside your browser. In that mode nothing is sent anywhere, and it works with no connection at all.

If AI answers are switched on, one thing does leave your browser: your question, plus the passages from this site that matched it, are sent to our assistant endpoint so an AI model can write the reply. Nothing identifying you goes with it — no account, no page counter, no id of any kind — and the conversation is not stored: it lives in the page until you close the tab. You can turn AI answers off at any time from the gear icon in the assistant, which returns it to searching your browser only.

Answers you receive are kept in your own browser for 30 days so that asking the same thing again is instant and costs nothing. That copy never leaves your device, and clearing your browser data removes it.

Answers are study material, not medical or professional advice. For anything clinical, your protocols and medical direction are the authority.

Third parties your browser does contact

• Google Fonts serves the two typefaces. Google receives the request, including your IP address, as it would for any hosted file.
• jsDelivr serves the Supabase client library, and only on pages where signing in is possible.
• Wikimedia Commons serves three lung-sound recordings, and only if you press play on one in the sound trainer.
• Cloudflare runs the study assistant's AI model, and only if AI answers are switched on and you ask it something. It receives the question and the matching passages, as described above.
• Umami receives the analytics described above, on every page.
• GitHub Pages hosts the site and, like any web host, sees the requests for it.

Your rights

Because there is no identifier attached to the page counter, there is nothing there to look up, correct or delete. For an account, you can export or delete everything by emailing the address below; if you are in the UK, EU or California, the access, correction, deletion and portability rights you have under GDPR or CCPA apply to that account data.

Children

This site is built for people studying for professional certification and university courses. It isn't directed at children under 13, and we don't knowingly collect anything from them.

Changes, and how to reach us

If this policy changes in a way that affects what is collected, the date above will change with it. Questions, or a deletion request: testaolivier10@gmail.com.