This Privacy Policy explains what personal information ToolboxPrep ("we", "us", "our") collects, how we use it, who we share it with, and your choices.
01Information we collect
- Account information: your email address, your name if you give it, the ASE test you are studying, and a securely hashed version of your password. We never store your password in plain text.
- Google sign-in: if you sign in with Google, Google sends us your name, email address and a Google account ID. We never see your Google password.
- Study activity: the practice sets and timed practice tests you take, your answers, scores and progress, so we can show your readiness and weak content areas.
- Free sample answers: when someone tries the free quiz without an account, we record which answer was picked for each question under a random run number. That record has no email, name, IP address or cookie attached.
- Purchase information: the plan you buy and a record that you have access. Payments are processed by Stripe; we never receive or store your full card number. Stripe gives us a payment reference and, where applicable, a customer ID. If you arrived from one of our Google ads, the ad click ID is saved with your checkout so we can tell which ad led to a sale.
- Email address you give us for study material: if you enter your email to unlock quiz explanations or a cheat sheet, or tick the study-email box at sign-up, we keep that address, the test it is for, and whether you open or click our emails.
- Messages: what you send us through the contact form or by email.
- Technical information: a login cookie, and basic server logs (such as IP address and browser type) used for security and to run the Service.
02How we use it
- to create and manage your account and log you in;
- to provide the Service: deliver questions, record progress, and unlock paid access after payment;
- to answer your support requests and question reports;
- to send service email (account confirmation, password resets, purchase confirmations, one reminder about a checkout you started) and, only if you asked for it, study tips and emails about your test;
- to understand how the site is used and what our advertising achieves;
- to keep the Service secure, prevent abuse, and meet legal obligations.
03Cookies and browser storage
Login cookie. We set one essential cookie, tbp_session, to keep you logged in. It lasts up to 30 days, cannot be read by scripts on the page, and is not used for advertising.
Browser storage. The site also saves a few things in your own browser (local storage, keys starting tbp_): your light or dark theme choice and, after you enter your email at the end of a free quiz, that email and the test it was for, so checkout doesn't ask for it again. Clearing your browser's site data removes them.
Google Analytics (GA4) tells us how people find and use the site: which pages they visit, which website or search sent them, the type of device and browser, their approximate location (city level), and whether they start or finish a practice quiz. We have turned off Google signals and advertising features in Google Analytics, so it is not used to build advertising profiles.
The Google Ads tag tells us when someone who clicked one of our ads signs up or buys, so we can measure what our advertising achieves. It may also let us show ToolboxPrep ads to people who visited this site before (remarketing): Google keeps a list of browsers that visited certain pages and may show them our ads on Google or other websites. We do not send your name, email address or quiz answers to Google Analytics or Google Ads.
You can block these cookies in your browser settings without affecting your account, turn off personalized ads in Google's Ads Settings, or install the Google Analytics opt-out add-on. Google explains its use of this information in How Google uses information from sites that use its services.
04Who we share it with
We do not sell your personal information. We share it only with service providers who help us run the Service, and only as needed:
- Stripe, to process payments (under Stripe's own privacy policy);
- MailerLite, our email provider, which stores the email address you gave us for study material and sends those emails;
- Google: Google sign-in if you choose it, and Google Analytics and the Google Ads tag (see Cookies);
- our hosting provider, to store data and run the Service.
We may also disclose information if the law requires it, or to protect our rights, our users or the public.
05Email and unsubscribing
Every marketing email we send says it is from ToolboxPrep, includes our postal address, and has a one-click unsubscribe link. Unsubscribing stops study and marketing email right away (and in any case within 10 business days); you will still get service email about your account or a purchase. You can also unsubscribe by emailing support@toolboxprep.com.
06Where it is stored
ToolboxPrep is run from Alberta, Canada. Your information is stored on servers operated by our hosting, email and payment providers, which may be in Canada, the United States or other countries. Wherever it is processed, it is protected by the safeguards described here, and it may be accessible to authorities in those countries as their laws require. We handle personal information in line with Canada's federal privacy law (PIPEDA) and the privacy laws that apply where you live.
07How long we keep it
We keep your account and study data while your account is active. If you close your account or ask us to delete your data, we delete or anonymize it within a reasonable time, except records we must keep for legal or accounting reasons (such as transaction records). Free sample answers carry no personal data and may be kept to improve the questions.
08Your choices and rights
Wherever you live, you can ask us to tell you what personal information we hold about you, to correct it, or to delete it, and you can stop optional emails at any time. Some states, such as California, give residents these rights by law; we extend them to everyone. To make a request, email support@toolboxprep.com. We may need to confirm your identity first, and we will not treat you differently for asking.
09Security
We protect your information with hashed passwords, encrypted connections (HTTPS), login cookies that page scripts cannot read, rate limits on sign-in, and access controls. No method of transmission or storage is perfectly secure, but we work to safeguard your data and to deal with any incident promptly.
10Children
The Service is for people preparing for ASE certification and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.
11Changes to this policy
We may update this Privacy Policy from time to time. We will change the "Last updated" date above, and if the changes are material we will take reasonable steps to tell you.
12Contact us
For any privacy question or request, email support@toolboxprep.com or use our contact page.