Who operates this site
This site is operated by REPLACE: operator name. Questions about this policy, or requests to access or delete data, go to REPLACE: [email protected].
What is collected
Three categories of data exist on this site. The first two are needed to run your account; the third is analytics, which is on by default and which you can turn off at any time with the "Privacy choices" control on this page.
- Account and study data — your email address, a scrypt hash of your password (never the password itself), lesson progress, practice sessions, every answer submitted with how long it took, bookmarks, and interface preferences. This is what makes resuming a session possible.
- Security and account activity — sign-ins, failed sign-in attempts, registrations, password resets and sign-outs, each with the IP address, browser user-agent and approximate location (country, region, city) supplied by our network provider, Cloudflare. This protects accounts against takeover and abuse.
- Analytics, unless you turn them off — a first-party visitor identifier cookie, the pages you view, time actively spent on each page, page performance timings, clicks on calls to action and outbound links, and a session recording of how you move through the site. Everything typed into form fields is masked before it leaves your browser, and verification widgets are excluded from recordings. If you later sign in or register, earlier analytics from the same browser are linked to your account.
How analytics and recordings are used
Analytics and recordings are used to find confusing lessons, broken pages and questions that take unusually long, and to understand which material helps learners pass. They are viewed only by the site operator. They are not sold, not shared with advertisers, and not used to build advertising profiles. No third-party analytics or session-recording service receives them: they are stored on infrastructure the operator controls.
You can change your choice at any time with the "Privacy choices" control on this page. Turning analytics off stops collection immediately and removes the visitor identifier from future requests; it does not affect your account or study progress.
Service providers
Cloudflare delivers the site, filters malicious traffic and provides the bot check on sign-in and registration forms. Amazon Web Services hosts the application, its database and encrypted backups, and sends password-reset email. Both process data on the operator's behalf and only to provide those services.
What is not collected
This site does not ask for, store, or process financial account numbers, Social Security numbers, brokerage credentials, CRD or IARD numbers, or any other sensitive personal or financial identifier. Do not enter them anywhere on this site.
Advertising and affiliate partners
Pages that carry advertising or affiliate links may allow third parties to set cookies or receive your IP address and browser details. Those parties act as independent controllers of that data under their own policies. Advertising is never shown on lesson, practice, results, or progress pages.
Where advertising is served, product categories relating to investment products and financial services are blocked so that they do not appear alongside educational material.
Legal basis, retention, and your rights
Account and study data are retained until you ask for them to be deleted. Session recordings are deleted after 30 days. IP addresses and user-agents attached to activity records are erased after 90 days, and activity records themselves after 13 months. Operational server logs are kept for 30 days.
You may request a copy of your data, ask for corrections, or ask for deletion by writing to REPLACE: [email protected]. Requests are answered within 30 days. Residents of jurisdictions with statutory data rights, including the EEA, the United Kingdom, and applicable US states, may exercise those rights through the same address.
Changes
This policy takes effect on 2026-08-16. Material changes will be reflected by a new effective date on this page.