Privacy

Last updated: October 12, 2026.

In short: you can use the free site without giving us anything. We use no advertising trackers, and the only cookie is the log-in cookie for people who create an account. We only store what's listed below.

What we collect

• If you join the email list: your email address, that you ticked the consent box (and which wording you agreed to), the practice score you had when you signed up (if any), which test the list is for, and any campaign tags in the link that brought you here (for example utm_source).
• If you report an error: the question, the reason you picked and your note, if you write one. Please don't put personal details in the note.
• Anonymous counts: when someone starts or finishes the practice test, starts a topic quiz, joins the list, we count it with the page address and any campaign tags. These counts contain no personal identifiers.
• If you create an account or log in: your email address, when the account was created and when you last logged in. To log in we email you a one-time link; we store only a scrambled version of it (a hash), the email it was sent to and when it expires (30 minutes). Used and expired links are deleted within a day.
• Spam prevention: when you join the list, report an error or ask for a log-in link, we store a one-way scrambled code (an HMAC hash) made from your IP address, so we can limit repeated submissions. We delete it after 30 days, and we never store the IP address itself.

What stays in your browser

Your in-progress practice test and your result are kept in your browser's session storage, so a refresh doesn't lose them. They aren't sent to us (except your score, if you join the email list from the results page), aren't used for tracking, and are cleared when you close the tab.

One log-in cookie, no ad trackers

When you log in, we set one cookie that keeps you logged in for 30 days. It holds your email address and an expiry date, signed so it can't be forged, and it's used for nothing else. Logging out removes it. If you never log in, we set no cookies. We don't use advertising pixels or third-party trackers. Page views are counted with Vercel Web Analytics, which works without cookies.

Who processes your data

• Vercel hosts the site and provides the cookieless page-view analytics.
• Supabase hosts our database, in the United States.
• Resend sends our emails, including log-in links.

Emails

What we email depends on the box you ticked. For Part 107: a copy of your practice results, study tips and launch news. For A&P: an email when A&P mechanic practice tests launch. We'll start sending once our email service is set up, and we'll list it under "Who processes your data" when it is. Every email has an unsubscribe link. We never sell or rent your email address. If the paid product doesn't launch within 12 months, we delete the email list.

Your choices

To unsubscribe, or to ask us to delete your email address or anything else you sent us, email hello@preflightpass.com.