Privacy · prepmate

prepmate is operated by Systemdr, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States — the data controller for everything described here. There is no advertising, no third-party analytics, and nothing to sell about you. This page says exactly what is stored, why, and how to remove it.

What we store

Your email address, if you buy a guide or ask for the free starter pack. It is how access works, since there are no passwords, and how we reach you about your purchase.
What you bought, so the right guide opens for you.
Your reading progress — which questions you have marked done — if you use that feature.
Sign-in codes, hashed, until they are used or expire after 15 minutes.

Card details are never stored or seen by us. Payment happens on Stripe's systems; we receive only the email address, what was purchased, and whether it succeeded.

Analytics

We record which pages are visited and what is done on the site (signing in, starting checkout, buying, marking a question done) to know what is worth writing and where people get stuck. It is first-party only: there is no Google Analytics, no advertising pixel, no data broker. Each event carries your approximate location (country, and region and city where available) as reported by our network provider, Cloudflare, from your IP address. Raw IP addresses are not stored.

If you are not signed in, a visitor is recorded as a one-way hash of the day, a secret, your IP address and your browser string, so the same person on two days is two different values. If you are signed in, events are recorded against your email, so we can see your activity on the site over time, for example to help if something goes wrong with your access.

Cookies and local storage

One cookie, set only when you sign in or buy: a signed value holding your email so pages know it is you. Strictly necessary, and removed when you sign out.
Your browser's own storage holds your light or dark preference, your cart, and a random per-tab id. These never leave your device except the cart, which is sent only when you start checkout.

There are no advertising or tracking cookies, which is why the site does not nag you with a consent banner.

Email you receive

Sign-in codes and purchase confirmations are transactional: you get them because you asked for something. If you request the free starter pack, you also get a short series of preparation emails. Every one carries an unsubscribe link that works immediately and permanently, and unsubscribing never affects sign-in or purchase emails.

Who else is involved

Only the services needed to run the site: Stripe for payments, our email provider for sending mail, and our hosting provider, whose servers are in Germany, where the database lives along with encrypted backups. Nobody else receives your data, and it is never sold or shared for advertising.

How long we keep it

Purchase records are kept while your access lasts and afterwards as long as tax and accounting rules require. Analytics events are kept until you ask us to delete them, with the rest of your data. Sign-in codes disappear within 15 minutes. Everything else lasts until you ask us to delete it.

Your control

Email [email protected] to get a copy of what we hold about you, correct it, or have it deleted. We will not ask why. Deleting your data ends access to anything you bought, so we will confirm before doing it. You can also unsubscribe from emails yourself at any time, and signing out removes the only cookie we set.