Privacy Policy

Last updated: May 27, 2026

This Privacy Policy describes how GCSprep ("we", "us") collects, uses, and shares information when you visit gcsprep.com or use our exam-preparation Services.

1. Information we collect

Account information: email address, display name, and a hashed password when you create an account.
Purchase information: the plan you bought, purchase date, and access window. Payment card details are collected and stored by our payment processor (Stripe) — we never see or store full card numbers.
Usage information: quizzes attempted, answers submitted, scores, and progress, used to power your dashboard and improve the product.
Technical information: IP address, browser, device type, referring site, and pages viewed, collected through standard server logs and privacy-friendly analytics.
Communications: messages you send us (e.g., support email).

2. How we use information

To provide and operate the Services, including granting access to purchased programs.
To process payments and prevent fraud.
To send transactional emails (receipts, password resets, account notices).
To send occasional product updates — you can unsubscribe at any time.
To improve content quality, fix bugs, and analyze aggregate usage.
To comply with legal obligations and enforce our Terms.

3. How we share information

We do not sell your personal information. We share information only with service providers that help us run the Services, under contracts that require them to protect your data:

Stripe — payment processing.
Supabase — database and authentication hosting.
Email provider — transactional email delivery.
Analytics provider — aggregate, privacy-friendly traffic analytics.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, property, or safety of GCSprep, our users, or others.

4. Cookies

We use a small number of cookies and similar technologies to keep you signed in, remember preferences, and measure traffic. You can disable cookies in your browser, but parts of the Site may not function correctly.

5. Data retention

We retain account and purchase records for as long as your account is active and for a reasonable period afterward to satisfy legal, tax, and accounting obligations. You may request deletion at any time (see Your rights below).

6. Security

We use industry-standard safeguards including encryption in transit (HTTPS), hashed passwords, and role-based access controls. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by applicable law.

7. Your rights

Depending on your jurisdiction (including the EU/UK under GDPR and California under CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, email support@gcsprep.com. We will respond within the time required by law.

8. Children

The Services are intended for adults preparing for a professional examination and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. International users

GCSprep is operated from the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data-protection laws than your country.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

11. Contact

Questions or requests? Email support@gcsprep.com.