Privacy

1. Using the app without an account

Guest study is entirely local. Your answers, review schedule, and settings are kept in your own browser's storage and are never sent to the server. No email address, no account, no server-side record that you were here. Clearing your browser storage — or using Clear locally stored progress on the Account page — removes it.

2. What an account stores

• Your email address. Used to sign you in and nothing else. It is not used for marketing, and there is no mailing list.
• A display name, if you set one. Optional, and it is what other members of a study group see.
• Study progress: quizzes and exams you took, the option you picked on each question, how confident you said you were, time spent, and your spaced-repetition schedule.
• Preferences: your track, target exam date, weekly study hours, self-rated strong and weak domains, theme, and text size.
• Study groups you join, and whether you chose to share your progress or scores with them.
• Question reports you file, so a reviewer can act on them.

We do not ask for or store a password — see section 6. We do not collect your name, employer, certification number, location, or payment details.

3. No tracking, and one third party

There is no analytics, no advertising, no third-party tracking scripts, and no cross-site identifiers. Exactly one external service is involved: the mail relay that delivers your sign-in link, which necessarily receives your email address and that link. Nothing else about you leaves the server.

The app sets one cookie, ohsprep_session, which holds your signed session. It is HTTP-only, same-site, sent only over HTTPS in production, and expires after 30 days. It exists to keep you signed in; it is not used to profile you, and there are no other cookies to consent to.

4. What other people can see

Members of a study group see your display name and, only if you turned those switches on, your progress or your scores. They never see your email address — the group screens are not given it. Nobody other than you and an administrator can see your answers.

5. How long things are kept

• Your study data: until you delete it, or delete your account.
• Sign-in links: valid for 15 minutes, invalidated the moment one is used, and the record deleted shortly after it expires.
• Sign-in rate limits: your address is stored only as an unreadable hash, alongside a request count, and the row is deleted once its window has passed.
• Your session cookie: 30 days, or until you sign out.

6. Security

Sign-in is by emailed link, so there is no password to store, leak, or reuse. Sign-in links are held only as a one-way hash, are single-use, and cannot be claimed twice. Sessions are cryptographically signed. Sign-in requests are rate limited per address and per network, so your address cannot be used to send you a flood of mail.

7. Getting your data, and deleting it

The Account page has both, and neither needs to go through us. Download your data gives you a JSON file with your account details, preferences, every attempt and answer, your review schedule, your study time, your group memberships, and the reports you filed. Questions are identified by reference rather than copied, because the question bank is not yours to take.

Delete account removes your account and everything listed in section 2, on the server and on the device you delete from. It cannot be undone.

Two deliberate exceptions, so this is not a promise we quietly break:

• A question report you filed is kept, with you detached from it. The problem you reported still needs fixing after you have gone.
• If you held a reviewer or administrator role, the record of content you approved keeps your email address, in the item's review attribution and in the content audit trail. That record is the evidence that a named person approved material other people are being examined on, and removing it would leave published content with no reviewer. This applies only to accounts that reviewed content; an ordinary account leaves nothing behind.

8. Contact

To ask what is held about you, to have something corrected, or to have data removed without using the buttons above: privacy@sitelinesafety.ca

See also the terms of use, which cover what the app is and what you may not put into it.