This policy explains what SAT Ranker collects, why we collect it, and what choices you have. We have tried to describe our actual practices plainly rather than in the broadest terms lawyers would allow.

What we collect

Account information. Your email address, a display name you choose, and a password. Passwords are never stored directly; we store only a bcrypt hash, which cannot be reversed into your password. If you sign in with Google, we receive your email address and name from Google instead of storing a password.

Practice activity. The questions you answer, which answers you chose, whether they were correct, how long sessions took, your rating and tier history, and your duel results. This is the core of the product: it is what produces your rank and your skill breakdown.

Payment information. If you subscribe, Stripe processes your payment. We receive and store only a Stripe customer identifier and subscription identifier, plus whether your account is currently premium and when access expires. We never receive or store your card number.

Usage analytics. We use Vercel Analytics to understand aggregate usage: which pages are visited, and events such as signing up, starting or finishing a practice set, reaching the free daily limit, and beginning checkout. This is aggregate and privacy-focused; it does not use advertising cookies and does not build cross-site profiles of you.

Technical data. Standard server logs, and your IP address transiently for rate limiting (to stop automated abuse of sign-up, login, and password-reset).

What we do not do

• We do not sell your personal information.
• We do not share your practice data with advertisers or data brokers.
• We do not use third-party advertising trackers on the site.
• We do not send marketing email you did not ask for.

Why we are allowed to use it

We use your account and practice data to provide the Service you asked for (this is necessary to perform our agreement with you), to keep the Service secure and prevent abuse, to process payments, and to understand aggregate usage so we can improve the product.

Students under 18

SAT Ranker is intended for students preparing for the SAT, many of whom are under 18. You must be at least 13 to create an account. If you are under 18, you should use SAT Ranker with your parent or guardian's knowledge and consent, and only a parent or guardian should make a purchase.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at theodorezibarras@gmail.com and we will delete the account and its data.

A parent or guardian may request to review or delete their child's information at any time using the same address.

Who we share data with

We share data only with the service providers needed to run SAT Ranker:

• Vercel — hosting and aggregate analytics
• Neon — the database that stores your account and practice history
• Stripe — payment processing (they handle card data directly, we never see it)
• Resend — sending account emails such as verification and password reset
• Google — only if you choose to sign in with Google

We may also disclose information if required by law, or to protect the rights and safety of our users.

What is public

Your display name, rating, and tier appear on the public leaderboard, and your display name is visible to opponents in duels. Your email address, practice history, and payment details are never shown publicly. If you would prefer not to appear on the leaderboard, contact us.

How long we keep data

We keep your account and practice history while your account is active, since your rating depends on that history. If you ask us to delete your account, we remove your personal data, retaining only what we must for legal or accounting purposes (for example, records of payments).

Security

Connections to the site are encrypted with HTTPS, and the database connection is encrypted in transit. Passwords are hashed with bcrypt, and password reset tokens are stored only as hashes so that a copy of our database could not be used to take over accounts. No system is perfectly secure, but we take these measures seriously.

Your choices

You can change your password from your account page, and update your display name by contacting us. You may request a copy of your data, or ask us to delete your account and data, at theodorezibarras@gmail.com. Depending on where you live, you may have additional rights to access, correct, delete, or limit the use of your information; we honor those requests regardless of where you live.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will be communicated where appropriate.

Contact

Questions or requests: theodorezibarras@gmail.com

See also our Terms of Service.