Privacy Policy
Effective date: July 28, 2026. This policy covers the CertTrainer web app at certtrainer.app, a service operated by Pickard Softworks, which is the data controller for the information described below. A separate desktop version of our Network+ trainer collects no data at all — this page is specifically about the web app, which has accounts and payments.
What we collect
- Account email. If you create an account, your email address and password are handled by Supabase Auth, our authentication provider. We don't see or store your raw password — Supabase manages that. We also keep a small internal profile record linked to your account, used to track which trainers you've unlocked.
- Payment information. If you purchase a trainer, payment is processed entirely by Stripe. We never receive or store your card number — Stripe handles that and shares back only a confirmation that the purchase succeeded, plus which product it was for.
- Quiz progress. Your section scores, statistics, and bookmarks are stored in your browser's local storage by default. If you're signed in, this progress is also synced to our database so you can pick up where you left off on another device.
- Usage analytics (only with your consent). We use Google Analytics to see which pages and study sections get used, and Microsoft Advertising's UET tag to measure which of our listings people arrive from and whether they go on to purchase. These cookies are set only if you press Accept on the cookie banner. If you decline, or ignore the banner, no analytics or advertising cookie is written and no identifier is stored. Both providers receive your IP address to derive an approximate location; we never send either one your email, name, or quiz answers.
- Session activity (only with your consent). Microsoft's UET tag also enables Microsoft Clarity, which records how pages are interacted with — clicks, scrolling, and mouse movement — so we can see where people get stuck. It does not record your keystrokes, passwords, or payment details. Like everything else optional, it does not load at all unless you accept.
- Audience information (only with your consent). If you accept, Google Analytics may also report aggregate demographic and interest categories — such as approximate age range, gender, and broad interest groups — derived by Google from signed-in Google users. We see these only as anonymised, aggregated groups in our reports, never tied to you as an individual, and we use them solely to understand who we're building study material for. This is off entirely unless you accept.
- Server logs. Our host, Vercel, records standard request data — including your IP address, browser type, and the pages requested — as part of serving and securing the site. This happens for every visitor and isn't something we can switch off, as it's required to operate the service.
Cookies
Cookies needed to keep you signed in and to process a payment are always active — the site can't work without them. Analytics and measurement cookies, from both Google and Microsoft, are optional and off until you accept them. You can change your choice at any time by reopening the cookie banner, or by clearing this site's data in your browser.
Who we share data with
We don't sell your data, and we don't show ads on this site. Data is shared only with the providers needed to run and measure the service: Supabase (accounts and progress storage), Stripe (payment processing), Vercel (hosting and server logs), and — only if you accept the cookie banner — Google Analytics (usage measurement and aggregate audience reporting) and Microsoft (Advertising, for measuring which listings lead to a purchase, and Clarity, for interaction recordings). We do advertise this site elsewhere, and those two measurement tags are how we tell whether that advertising works; neither runs unless you accept.
How long we keep it
Account details and synced progress are kept for as long as your account exists. If you ask us to delete your account, we remove it and its associated data within 30 days. Stripe retains payment records independently for as long as tax and accounting rules require, which we don't control. Server logs are retained on a short rolling window by our host. Analytics data expires automatically according to the retention setting on our Google Analytics property.
Your rights
Wherever you live, you can ask us to show you what data we hold about you, correct it if it's wrong, delete it, or send you a copy in a portable format. If you're in the UK, EU, or another region with equivalent protections, you also have the right to object to or restrict how we process your data, and to withdraw analytics consent at any time — withdrawing consent doesn't affect anything processed before you withdrew it. To exercise any of these, email us at the address below; we'll respond within 30 days. If you believe we've mishandled your data, you're entitled to complain to your local data protection authority.
Data deletion
You can clear locally stored progress at any time by clearing this site's data in your browser. To delete your account and associated data from our database, email pickardsoftworks@outlook.com and we'll remove it within 30 days.
Changes to this policy
If how we handle data changes, we'll update this page and adjust the effective date above.
Contact
Privacy questions or requests: pickardsoftworks@outlook.com.