Privacy Policy

Who is responsible for your data

ScorecardStudy is an independent exam preparation platform run by a sole trader based in Dubai, United Arab Emirates. We decide what is collected here and why, so we are the controller of your data. For anything on this page, including the rights set out below, write to hello@scorecardstudy.com.

What we collect

• Account data: your name, email address, and password (stored hashed by our authentication provider, Supabase).
• Study data: module progress, quiz scores and mock exam results. Your dashboard runs on it. The person who runs the site can see it too, on your account record beside your name and your email address: which modules you have finished, what you scored on each, which ones you have started and when you last studied.
• Payment data: handled entirely by Stripe. We never see or store your card details; we keep only the payment status and reference.
• Signup country: the country you created your account from. It is worked out at signup from the IP address your connection presents. We store the country and nothing finer. No city, no region, no coordinates. The IP address itself is never stored, never logged and never passed on.
• Page views: we count the pages people read. Each view records the page address on this site, the site you arrived from if your browser sent one, the country your request came from and whether you are on a phone, a tablet or a desktop, with the browser family. A random identifier, kept by your browser and holding nothing about you, groups the views in one visit and lets us tell a returning reader from a first-time one. If you are signed in, the view is linked to your account. We may also record how long the page was open, how far down it was scrolled and which of the main buttons was clicked. That is the whole list. We do not record your IP address, we do not record anything you type and we do not follow you to other websites.
• No cookies for any of this, and no other company. Page views use no cookies and no advertising trackers. There is no Google Analytics here, and no third-party analytics service of any kind. The site loads no third-party scripts at all. The counting is done by our own hosting as your request arrives, and the country is resolved there from the connection and then discarded, so the IP address is never stored.

Automated visitors, such as search engine crawlers and the link preview fetchers that Reddit, WhatsApp and other apps run when a link is shared, are flagged and dropped from the counts.

What we use it for

To run your account, save your progress, process your payment and send service emails such as confirmation, receipts and password resets. We do not currently send marketing email at all. If that ever changes it will be opt in, and every message will carry an unsubscribe link.

Study progress is used for one thing beyond your own dashboard. The person who runs the site reads it to see whether the platform is being used and to make sense of the feedback people send. That reading happens per account, so it sits beside your name and your email address rather than as a bare count. It is not used to profile you, it does not change what you are shown, it is never sold and nobody outside the processors below sees it.

The signup country is used for one thing: seeing which markets the platform is reaching. We read it mostly as a count per country. It also sits on your account record, where the person who runs the site can see it beside your name and your email address, the same as anything else you gave us when you signed up. It is not used to profile you and it does not change what you are shown.

Page views are used to see which pages get read, which ones get abandoned and which links people arrive by. One person reads those numbers, and reads them as totals: views per page, visits per country, referrers per week. They tell us what to write next and whether sharing a link somewhere was worth doing. They are not used to profile you, they do not change what you are shown, they are never sold and they are never used to advertise to you anywhere.

Why we are allowed to hold it. Account data and study data are processed because we need them to provide the service you signed up for. Payment records are kept because tax and accounting law requires it. The signup country, the page view counts and our own reading of your study progress rest on our own interest in understanding how the site is found, read and used, which we weigh against how little each record says about you. Tell us by email if you object. We will clear the country and the page views from your account, and we will stop reading your progress for anything except your own dashboard. Anything resting on your consent, such as future marketing email, can be withdrawn at any time.

Who we share it with

Only the processors that run the service: Supabase (authentication and database), Stripe (payments), and Netlify (hosting). We do not sell or rent personal data to anyone.

Those processors run on servers outside the United Arab Emirates, mainly in the European Union and the United States, so your data is transferred and held there. Each is bound by its own data processing terms and receives only what the service needs to work.

Where it lives and how long

Data is stored by the processors above. Ask us by email and we will delete your account, which removes your profile and your progress. The signup country sits on your profile, so it goes with it. Payment records are retained for as long as accounting law requires.

Page view records sit in the same database. When we delete an account we also strip your email address and account id out of them, which leaves a count of a page being read by nobody in particular. We have not set a fixed deletion date for those anonymous counts. If that changes we will say so here.

Your rights

You can request a copy of your data, correct it, or have it deleted. Write to hello@scorecardstudy.com and we will act on it within 30 days.

Cookies

The platform uses a session cookie to keep you signed in and to verify paid access on protected pages. That is the only cookie we set. Counting page views sets no cookie at all. The identifier that groups your views is a random value held in your own browser's storage, it says nothing about you, and it is never sent to any site other than this one. Clearing your browser storage clears it. There are no advertising cookies, first party or third party.

Changes

If this policy changes materially, we will flag it on the site and update the date at the top.