1. Information we collect
We collect the answers, confidence choices, scores, progress, and timestamps needed to create and preserve your practice history. If you create an account, save a report, reserve access, or purchase an exam, we also collect your email address and optional name. Account passwords are stored as salted, one-way hashes rather than readable passwords. Contact messages contain the details you submit.
We may record basic technical and campaign information such as page path, referring page, UTM parameters, event name, browser-generated identifiers, and approximate region supplied by infrastructure providers. We do not ask for Microsoft account passwords, government identifiers, or exam-registration credentials.
First-party product measurement uses a random browser-tab session identifier that expires after 30 minutes of inactivity. A separate random first-party browser cookie lasts up to 30 days and allows owner-browser exclusion, including earlier visits from that browser. Server-signed challenges expire after 30 minutes. Visible time and interaction signals distinguish likely human sessions from unconfirmed visits; they do not prove a unique person. It records visible page views and useful actions, without storing raw IP addresses or full referring URLs. Owner browsers may receive a cookie used only to exclude internal activity from public-traffic reports.
2. Why we use it
- Create your account and show purchased exams.
- Save exam progress across devices and preserve results.
- Prioritize product improvements and diagnose errors.
- Respond to support and answer challenges.
- Measure whether advertising leads to useful actions.
- Process purchases, refunds, tax, fraud checks, and automatic access fulfillment.
3. Consent and marketing
Saving a report opts you into the report email and essential DP-800 launch updates. You can unsubscribe from marketing at any time. The Google tag library is present on our pages with measurement storage denied by default. Optional analytics events and masked session recordings start only after you allow them through the cookie choice shown on the site. Declining does not block the free check.
4. Providers
We use Cloudflare-hosted infrastructure to deliver the site and store accounts, entitlements, and practice progress. Resend delivers requested verification and password-recovery codes, and can forward contact requests to our support inbox. When enabled, Google provides consent-based advertising measurement. Microsoft Clarity provides optional, consent-based masked session recordings and click/scroll heatmaps to identify navigation problems. Input values are masked; we do not record passwords or payment details. Site text and private account content are masked in recordings. Payment takes place on Lemon Squeezy, outside our site recordings. When live checkout is available, Lemon Squeezy acts as merchant of record for payment, tax, receipts, fraud review, and refunds. Each provider processes data under its own terms and privacy commitments.
5. Retention and security
Diagnostic attempts and product analytics are generally retained for up to 24 months so we can compare product quality over time. Contact messages are retained only as long as needed to resolve the request. Purchase and tax records may be retained longer where legally required. We use access controls, HTTPS, minimal data collection, and signed payment webhooks; no internet service can promise absolute security.
6. Your choices
You may ask to access, correct, export, or delete personal data associated with your email, withdraw optional consent, or object to marketing. Some transaction records may need to be retained for legal or fraud-prevention reasons.
7. Children and international use
The service is intended for people aged 18 or older. Data may be processed in countries where our infrastructure and payment providers operate, with the safeguards those providers make available.
8. Contact
Use the contact form and select “Privacy or data request.” We will verify the request before disclosing or deleting account-linked information.