Privacy Policy
Effective October 16, 2026
certdr ("we", "us") runs a certification study site at certdr.com and cert.bmtnfriday.com. This policy explains what we collect, why, and what you can do about it. Questions go to feedback@certdr.com.
What we collect
- Account details. Your email address. If you sign in with Google, we also receive your name and Google account ID from Google. We never see your Google password. If you use a password with us, it is stored and checked by our login provider (Amazon Cognito); we never see or store it ourselves.
- Study activity. Which questions you answer, whether you got them right, the mastery level you choose, and when you studied. This is what powers your progress, weak-question practice, and study plans.
- Feedback you send. Messages you write on the Feedback page, and our replies.
- Membership details. If you buy a membership on Gumroad, we receive your license key, the email you bought with, and whether your membership is active, from Gumroad. Gumroad handles payment; we never see your card or bank details.
- AI connection details. If you connect your own AI assistant, we store a fingerprint (hash) of the access token you generate, never the token itself, and when your assistant last connected.
We don't use advertising, tracking pixels, or analytics cookies. The site stores your login session and a few preferences (such as the course you last picked) in your browser's local storage so you stay signed in.
How we use it
- To run your account, sign you in, and keep your study progress.
- To check that your membership is active, and to end access when it isn't.
- To read and answer your feedback and improve the courses.
- To send you account emails: setting up your password, password resets, and replies to your feedback.
We don't sell your data or share it for advertising.
If you joined through a team join key (rather than buying a membership), the first part of your email address and your study streaks may be posted to that team's private Slack channel. Members who bought through Gumroad never appear there.
Your own AI assistant
When you connect an AI assistant (for example Claude or ChatGPT) to certdr, it can read your progress and questions and record your answers, using the access token you gave it. What your assistant sends to its provider is governed by that provider's own terms and privacy policy, not ours. You can stop this at any time by removing certdr from your assistant.
Who processes it for us
- Amazon Web Services: hosting, database, login (Amazon Cognito), and email (Amazon SES), in the United States.
- Gumroad: memberships and payments.
- Google: sign-in, only if you choose "Continue with Google".
How long we keep it
We keep your account and study data while your account exists. If your membership ends, your data stays so you can pick up where you left off if you come back, unless you ask us to delete it.
Your choices
Email feedback@certdr.com from your account's address to get a copy of your data, correct it, or delete your account and its data. We'll respond within 30 days.
Children
certdr isn't meant for children under 13, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date above, and email you about significant changes.