Privacy

Privacy Policy

Effective July 24, 2026

1. Scope and accountability

This Policy applies to the Data Plus Study website, free resources, customer accounts, subscriptions, support, email communications, and study platform. Data Plus Study is responsible for personal information under its control and uses service providers to operate authentication, hosting, payments, security, subscriptions, and requested email delivery.

2. Information we collect

Account information

When you create an account, we collect your email address, account identifier, email-confirmation status, and authentication information needed to sign you in. Password authentication is provided through Supabase; Data Plus Study does not display your password to the site operator.

Subscription and billing records

We receive subscription-related information from Stripe, including Stripe customer and subscription identifiers, subscription status, renewal or end dates, and checkout confirmation. Stripe collects and processes the payment method, cardholder name, billing address, and transaction information needed to process payment.

Data Plus Study does not receive or store your full card number or card security code.

Study progress and device storage

Question progress, answers, and related study state are stored in your browser's local storage on the device you use. Authentication session tokens and a temporary checkout-session identifier may also be stored locally so the site can keep you signed in and confirm access. Local progress is not automatically synchronized between devices.

Support and communications

If you contact support, we collect the information you include, such as your email address, account details, page or chapter, screenshots, and description of the issue.

Free-resource and optional marketing emails

If you ask us to email the free glossary and objectives links, we collect the email address you enter, the requested resource, request time, and referral or campaign information included in the page URL. We use that information to deliver the requested links and prevent abuse.

The separate marketing checkbox is optional and is not selected automatically. If you select it, we also record the displayed consent-text version and confirmation status. Follow-up study tips, product updates, and subscription offers begin only after the address is confirmed. Leaving the box unchecked results in only the requested resource-delivery email.

Marketing messages contain an unsubscribe link. Unsubscribing, a permanent delivery failure, a spam complaint, or an active subscription stops the automated resource follow-up sequence.

Technical information

Our hosting, security, authentication, and payment providers may process ordinary technical data such as IP address, browser or device information, request timestamps, security events, and service logs to deliver, secure, and troubleshoot the service.

Optional analytics and advertising measurement

Google Analytics, Microsoft Advertising UET, and Microsoft Clarity help Data Plus Study understand site use, page interactions, advertising visits, checkout starts, completed subscriptions, and campaign performance. Clarity provides aggregated heatmaps and session-playback tools. Data Plus Study configures its own events so they do not include question text, written answers, passwords, card details, or customer email addresses.

Optional Google Analytics, Microsoft Advertising conversion events, and Microsoft Clarity session measurement are enabled only after you select Accept optional analytics. Until then, Microsoft UET uses advertising storage denied and may receive limited cookieless page-measurement signals as described in Microsoft's consent-mode documentation. If you decline, optional analytics cookies and session playback remain disabled.

You can reopen the analytics choices on this device at any time by selecting Review optional analytics choices. Declining a later prompt withdraws optional analytics consent for future visits on that device.

Read Google's Privacy Policy and the Microsoft Privacy Statement for information about their processing.

3. How we use information

We use personal information to:

• create, confirm, authenticate, and secure customer accounts;
• start and manage subscriptions, verify payment status, and unlock paid access;
• provide customer support and resolve account, billing, content, or technical issues;
• deliver free resources requested by email and, when separately confirmed, send optional study tips, product updates, and subscription offers;
• maintain service reliability, prevent abuse, and investigate security incidents;
• comply with legal, accounting, fraud-prevention, and payment obligations; and
• improve service functionality and correct errors.

We limit collection and use to purposes a reasonable person would consider appropriate in the circumstances.

4. Service providers and disclosures

We use providers that process information as needed to operate the service:

• Supabase for account authentication and subscription-access records;
• Stripe for checkout, payments, recurring billing, invoices, fraud prevention, and the customer billing portal;
• Render for application hosting and operational logs; and
• Cloudflare for domain, network, and security services;
• Resend for requested resource emails, optional consent-controlled follow-up messages, delivery events, and unsubscribe processing; and
• Microsoft Advertising with advertising storage denied for limited cookieless page measurement. Optional conversion events and advertising audience features are disabled.

Providers may process information in Canada, the United States, or other jurisdictions where they or their subprocessors operate. Information may therefore be subject to the laws and lawful access procedures of those jurisdictions.

We may also disclose information when required by law, to protect the service or users, to investigate fraud or abuse, or as part of a business transfer. We do not sell or rent customer personal information.

5. Cookies and local storage

Data Plus Study uses browser storage and necessary session technology to maintain sign-in, remember local progress, confirm checkout, and protect access. Optional Google Analytics and Microsoft Clarity storage is used only after consent. Microsoft UET advertising storage remains denied until that same optional choice is accepted. Data Plus Study does not sell or rent personal information.

You can clear browser storage using your browser settings. Doing so may sign you out and erase progress saved only on that device.

6. Retention

We retain account and subscription records while your account is active and afterward for as long as reasonably needed for access management, support, fraud prevention, legal, tax, accounting, and dispute-resolution obligations. Support records are retained only as long as reasonably necessary for the issue and related obligations. Free-resource email records are retained while needed to deliver the request, document consent or withdrawal, prevent unwanted future sending, measure delivery, and meet legal obligations. Browser-local progress remains on your device until you or the browser removes it.

7. Safeguards

We use administrative, technical, and contractual safeguards appropriate to the sensitivity of the information, including hosted authentication, restricted server credentials, encrypted HTTPS connections, Stripe-hosted payment collection, and subscription-access checks. No internet service can guarantee absolute security.

8. Access, correction, and deletion requests

You may ask whether we hold personal information about you and request access to or correction of that information, subject to legal exceptions. You may also request account deletion or ask a question or make a complaint about our privacy practices.

Send a request from the email address associated with your account to support@dataplusstudy.com. We may need to verify your identity before completing the request. Some records may be retained where required for legal, payment, security, or accounting purposes.

You may withdraw optional marketing consent using the unsubscribe link in any marketing message. A resource-delivery request can be completed without selecting the marketing checkbox.

9. Children

The service is not directed to children under 13. If you believe a child has provided personal information without appropriate authorization, contact us so we can review and take appropriate action.

10. Changes to this Policy

We may update this Policy when the service, providers, or legal requirements change. The effective date at the top identifies the current version. Material changes will be communicated through the service or by email when appropriate.