Privacy policy
CertCrafter is operated by an India-based limited-liability business. This policy explains the limited information used to provide online practice-test access and support.
Information we receive
Dodo Payments notifies us of your purchase and provides your email address, the product bought, the payment status and transaction identifiers. CertCrafter stores that purchase record, together with the email address and password hash for the account you create, in order to verify entitlement, provide support, prevent abuse, process refunds and maintain service security. Passwords are stored only as salted PBKDF2 hashes, never in a readable form. We do not receive or store payment-card numbers.
Accounts and sessions
When you sign in, the server places a random session identifier in an HTTP-only cookie. The cookie holds no personal information and no entitlement data. Your access is looked up from your purchase record on each request, so a refund removes access immediately. Sessions expire after 30 days of inactivity and can be ended at any time by signing out, which revokes that session on the server. Password-reset links are single-use and expire after two hours.
Local progress data
Your browser may store test answers, timer progress, marked questions, scores, dates, and attempt history in local storage so you can resume on that browser. This data is not uploaded as part of the normal test flow. Clearing browser storage removes that local progress; it does not affect your account or your purchase.
Retention, providers, and choices
We retain purchase and support records only as needed for service operation, accounting, fraud prevention, dispute handling, and legal obligations. Dodo Payments (payments), Neon (database hosting), Resend (transactional email) and Vercel (site hosting) may process information under their own policies. We do not sell personal information. Contact support@certcrafter.com for access, correction, deletion, or privacy questions, subject to applicable law and records we must retain.