Privacy Policy
Last updated
Draft: this page is being reviewed before payments open.
The short version
- You can practice without an account. Your practice record stays in your own browser.
- If you create an account, we keep your email and what your plan includes. Your password is handled by our sign-in provider, and we never see your card details: Stripe does.
- If you claim a certificate, the name you type and your result are shown to anyone who has its link or ID.
- We don't use advertising trackers or analytics, we set no cookies of our own, and we don't sell your data.
- You can ask to see, correct or delete your data at any time.
Who we are
Accounting Exercises is an app of ScaleSolving LLC. ScaleSolving LLC decides how your data is used here (in GDPR terms, it is the "controller"). Questions go to the address under Contact.
What we collect, and when
When you practice
Exercises run and are checked in your browser. Each time you check an answer, the site records the attempt (the exercise, its numbers, your answer, whether it was right, whether you used a hint or the solution, and how long it took) in your browser's own storage, under a random ID made on your device. This is what powers your progress, streaks and review on the progress page.
Today these records are not sent to us. We plan to let signed-in learners keep their practice record in their account, so it follows them to other devices; we'll update this policy before that starts.
When you create an account or sign in
- Your email address and password. Supabase, our sign-in provider, stores your password in a scrambled (hashed) form; we never see it.
- One sign-in for ScaleSolving apps. The sign-in is shared with other ScaleSolving LLC apps, so the same email and password work across them. Each app keeps its own profile and records, and this app's records are kept apart from theirs.
- A profile that marks your sign-in as an Accounting Exercises account.
- Sign-in details that Supabase records for security, such as when you signed in and from which IP address.
When you create an account or reset your password, Supabase sends the email for us.
When you buy a plan
Checkout runs on Stripe. You give your card or other payment details to Stripe, and they never reach our servers. Stripe tells us what we need to run your plan: a customer ID, which plan you bought, its status and renewal date, and the payments made. Stripe may email you receipts. Stripe's own use of your data is described in its privacy policy.
When you take a timed test or claim a certificate
- Starting a test: our server records which test you started, the numbers it chose for you, the start time and your browser's random ID.
- Finishing: your answers are sent to our grading service, which checks them and keeps nothing. We store the score, whether you passed, the time taken, and whether each task was right. We don't store your answers themselves.
- Claiming a certificate: we store the name you type with the result and issue an ID such as AE-XXXX-XXXX-XXXX.
A certificate is public by design. Anyone with its link or ID can see the name, the test, the score, the pass mark, the time taken, the date and each task. Nobody can browse or search other people's certificates. Your browser also keeps a list of the certificates you claimed, so the progress page can show them.
Every time you visit
Like any website, our hosting providers receive technical details with each request, such as your IP address, browser type and the page asked for. They use them to deliver pages, keep the service secure and fix faults, and may keep them in short-lived logs.
When you write to us
We keep your email and what you tell us, so we can answer and keep a record of requests such as refunds.
What stays in your browser
The site saves a few things in your browser's local storage and IndexedDB so it works. They stay on your device until you sign out (for the sign-in session) or clear this site's data in your browser.
| What | Why |
|---|---|
| A random learner ID | Groups your practice records and test runs on this device |
| Your practice attempts | Progress, mastery, streaks and spaced review |
| Your sign-in session (email, sign-in tokens, what your plan opens) | Keeps you signed in; cleared when you sign out |
| Certificates you claimed | Lists them on your progress page |
| Small preferences, such as a hidden course outline | Remembers how you like the page |
Cookies and analytics
We set no cookies of our own, and we use no analytics, advertising or tracking tools. Stripe's checkout and plan-management pages run on Stripe's site and use Stripe's own cookies, for example to prevent fraud. If we ever add analytics, we'll update this policy first and ask for consent where the law requires it.
Why we use your data
We use your data only to run Accounting Exercises. In plain terms, and with the legal basis that applies under laws such as the GDPR:
- To provide what you asked for (an account, a plan, grading, a certificate): because we need it to perform our agreement with you.
- To keep the site secure and working, prevent fraud and abuse, and improve exercises using combined results that don't identify you: because we have a legitimate interest in running a reliable service, balanced against your rights.
- To keep payment and tax records: because the law requires it.
- Anything else, only if you agree first. You can withdraw that agreement at any time.
We don't sell your personal information, and we don't share it for targeted advertising.
Who processes it for us
A few companies run parts of the service for us. They may use your data only to provide that service.
| Company | What it does for us |
|---|---|
| Supabase | Accounts and sign-in, our database, account emails, and the service that runs timed tests and certificates |
| Stripe | Checkout, subscriptions, receipts and refunds |
| Vercel | Hosting the site and the grading service |
We may also share data when the law requires it, to protect our users or our rights, or with a company that takes over Accounting Exercises, which would have to keep this policy's promises.
How long we keep it
- Account and profile: while your account is open, and deleted when you ask us to delete it.
- Plan and payment records: for as long as tax and accounting law requires, even after your account is closed.
- Certificates and test results: until you ask us to remove them, so that a certificate you shared keeps working.
- Emails to us: as long as needed to answer and to keep a record of the request.
- Your browser's storage: until you clear it. We can't see or delete it for you.
Deleting your account and data
Email us from the address on your account at the address under Contact and ask us to delete your account. We'll confirm the request and delete your Accounting Exercises profile and records, except what we must keep by law. Because the sign-in is shared with other ScaleSolving apps, we'll ask whether you also want the sign-in itself removed, which ends your access to those apps too.
To remove a certificate, send us its ID. To remove the practice record on a device, clear this site's data in that browser.
Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong, such as the name on a certificate;
- delete your data;
- give your data to you in a portable format;
- stop or limit a use of your data, or withdraw consent you gave.
Depending on where you live (for example in the EU, the UK or US states such as California), the law may give you more rights, and you can complain to your data protection authority. We won't treat you differently for using your rights. To use them, write to us; we may ask you to confirm the request from the email address on your account so we know it's you.
Children
The site is for people aged 13 and over. We don't knowingly collect personal data from children under 13. If you think a child under 13 has given us personal data, write to us and we'll delete it. Students under 18 need a parent's, guardian's or school's permission to create an account.
Where your data is processed
ScaleSolving LLC is based in the United States, and our providers may process data in the United States and other countries. Where the law requires it, data sent from the EU or the UK is protected by safeguards such as the European Commission's standard contractual clauses.
Security
Connections to the site are encrypted. Each person's account records are protected so that only they can read them, payments run on Stripe, and passwords are stored hashed by Supabase. No service is perfectly secure; if a breach affects your data, we'll tell you as the law requires.
Changes to this policy
We'll update this policy when what we collect or how we use it changes, and change the date at the top. For important changes we'll tell account holders by email or on the site before they take effect.
Contact
ScaleSolving LLC, the operator of Accounting Exercises. Email: [support email].