Privacy policy
This site is a free study tool for the FAA Part 107 remote pilot certificate. It collects what it needs to score your practice and nothing beyond that.
If you create an account: your email address, the username you choose, and a bcrypt hash of your password. If you sign in with Google, we receive your email address, your name, and your Google account identifier instead — we never see your Google password.
As you use the site: which questions you answered, what you selected, whether it was correct, and when. These are what produce your score, your accuracy by domain, and your streak.
Analytics: Google Analytics and Vercel Analytics record page views and a small number of product events (starting a run, completing a run, signing up, signing in). These carry no question content and no personal identifiers beyond what those services collect by default.
No payment details — the site is free and takes no payments.
No advertising or cross-site tracking identifiers, and nothing is sold or shared with data brokers.
Nothing at all if you use the site signed out, beyond the analytics above. An anonymous practice run is graded and discarded; it is never written to the database.
Account data and answer history live in a Postgres database hosted by Neon. The site itself runs on Vercel.
Your session is a signed token held in your browser's local storage. There is no session cookie. Signing out removes the token from your browser.
Passwords are stored only as bcrypt hashes and cannot be read back, by us or by anyone else with access to the database.
Google (Analytics and, if you use it, sign-in), Vercel (hosting and analytics), and Neon (database) process data on our behalf. Nobody else.
The leaderboard is public. It shows your username, your score, and your email address with most of it masked (for example a***a@example.com). If you signed up through Google and never chose a username, you appear as an operator number instead — your email is never used as a display name.
Ask and your account and its entire answer history will be deleted. Deletion cascades: no orphaned responses are kept.
You can change your username or password from your operator record at any time.
Questions about any of this, or a deletion request, can be sent to the address on the repository this site is built from.