Privacy policy

Who this covers

This policy applies to the OpenPrep website and accounts. OpenPrep can be contacted at [email protected]. If you follow a link to another website, that site has its own privacy practices.

Information we handle

• Account information: your email address, email-verification status, account ID, access role, first name, self-reported SAT scores and goal, selected test date, and any other profile details you provide. Supabase Auth processes your password for authentication; OpenPrep does not store it in its profile table.
• Study information: practice sessions, answers and skips, time spent, saved or flagged questions and notes, topic statistics, and related progress needed for review and analytics.
• Device information: browser storage holds vocabulary progress and your appearance preference on that device. Clearing browser storage or using another device can remove or separate that local progress.
• Usage and technical information: Vercel Web Analytics records page-view information for aggregate site statistics. Hosting and security systems may process IP addresses and request logs to deliver and protect the service.

Invitations and access requests

If you request access, we record your email, your consent to access-related email, when and which consent notice you accepted, and the administrator’s review decision. Requesting access does not create an account. Members can share a limited number of one-time codes; administrators have an unlimited allowance. We record which account issued and redeemed each code and when, to enforce limits and prevent reuse. Members can see the status of their own codes, but cannot use this feature to view another member’s private profile or scores. Access requests and invitation activity are visible to administrators. We also keep limited anti-abuse counters; their request identifiers are hashed.

When configured, Resend processes access-request notifications to the administrator. We record notification attempts and provider acceptance to prevent duplicate messages and support retries. Invitation emails to requesters remain paused; an administrator may share an approved code manually. This consent covers access-related contact, not marketing subscriptions.

How we use it

We use this information to create and secure accounts, review access requests, enforce invitation limits, verify email addresses, save your work, display feedback and analytics, determine access to licensed features, troubleshoot problems, and understand how the site is used. Administrators may review account access and question-bank records as needed to operate OpenPrep.

Cookies, local storage, and analytics

Authentication uses session cookies so you can stay signed in. Vocabulary progress and the theme preference use browser storage. Vercel Web Analytics provides aggregate page-view statistics and does not use third-party tracking cookies. Your browser may let you clear cookies or site storage; doing so may sign you out or erase locally stored preferences and vocabulary progress.

Service providers and sharing

OpenPrep uses Supabase for authentication and database services and Vercel for hosting and web analytics. These providers process information to deliver their services. We may disclose information if required by law or to protect the security of OpenPrep and its users. We do not display your private practice history or self-reported scores to other students. School reporting is not enabled by this profile feature; if added later, we will explain who can see student scores before enabling access.

Retention and deletion

Your account and saved practice history remain available while your account exists. You can request deletion from Settings after signing in. The account-deletion flow removes your OpenPrep account and linked study records. Limited invitation and access-request records may remain for abuse prevention and request administration; contact us to request their review or deletion. Deleting an account does not make an already redeemed code reusable. Browser-stored vocabulary data on other devices is not removed remotely; clear that device’s site storage separately. Limited records may remain in provider backups or operational logs for their normal retention periods or where required by law.

Your choices

You can review your saved work in your account, delete your account in Settings, and contact us at [email protected] to ask about access, correction, or deletion of personal information. We will handle requests according to applicable law and may need to verify your identity first.

Students and age

OpenPrep accounts are for people age 13 or older. We do not offer accounts to children under 13. If you believe a child under 13 has registered, contact us so we can investigate and remove the account as appropriate.

Security and changes

We use access controls and other safeguards to protect account and study data, but no online service can guarantee perfect security. We may update this policy as OpenPrep changes; the effective date above shows when this version took effect. Material changes will be communicated through the site or another appropriate channel.