Privacy Policy
Effective [date]
This policy explains what The Right MCAT Questions, run by [business legal name], collects and why.
What we collect
- Account details: your name, email address and phone number, and your password stored only as a scrambled hash we can't reverse.
- What you tell us at sign-up: your target test date and, if you answer them, your target score, latest score, study time, weakest section and how you heard about us.
- Study data: the tests you build, your answers, timing, flags, notes, highlights and confidence ratings.
- Purchases: which plan you bought, the amount and the date. Card details go straight to our payment provider, Lemon Squeezy; we never receive them.
- Technical data: your IP address and basic request logs, used to keep the site secure (for example, to slow down password guessing).
Cookies and browser storage
We use a login cookie, a security cookie that protects forms, and a short-lived cookie for on-screen messages. The test screen remembers small preferences (such as your highlighter color) in your browser. We don't use advertising or tracking cookies.
How we use it
- To run your account, save your progress and show your performance.
- To send account emails, such as password resets and purchase receipts.
- To show anonymous, combined statistics, such as the share of students who chose each answer.
- To keep the site secure and fix problems.
Who we share it with
We don't sell your personal information. We share it only with the services that run the site for us: hosting ([hosting provider]), payments (Lemon Squeezy) and email delivery ([email provider]), and only as much as they need.
How long we keep it
We keep your data while your account exists. When you delete your account, it's removed right away, and it drops out of our backups within 14 days.
Your choices
- Change your email or password, reset your question history, or delete your account on the My Account page.
- To ask for a copy of your data or a correction, write to [email protected].
Security and children
We use encrypted connections, hashed passwords and limited access to keep your data safe. The site isn't meant for children under 13, and we don't knowingly collect their information.
Changes and contact
If we change this policy in a significant way, we'll tell you on the site or by email. Questions: [email protected].