Privacy policy

Last updated November 4, 2026

What we keep

• Account: your name, email, a salted and peppered hash of your password (never the password itself) and, if you turn it on, your encrypted two-step verification key.
• Licenses: the licenses you bought, manage or activated, and when.
• Progress (licensed accounts only): questions seen, scores and exam history.
• Security log: sign-ins and account changes with IP address, country and browser, kept up to 400 days to protect your account and to detect account sharing and copying of the content.

What we do not keep

Visitors without a license have nothing saved, on our servers or in their browser. We do not use advertising or tracking cookies; the only cookie is the session cookie that keeps you signed in.

Content protection

For licensed accounts, the site blocks copying and printing of questions and keeps a count of the questions each account opens, to detect copying of the question bank. None of this records your screen or anything outside the site.

Payments

Purchases are handled by Paddle.com, the Merchant of Record for our orders. Paddle receives your payment details, name, email, country and tax information to process the payment and comply with tax law, under Paddle’s privacy notice. Card details never reach us; we receive the purchase details and your email.

Services we use

Cloudflare (hosting, database, email delivery, bot protection and cookieless, aggregate visit statistics) and Paddle (payments). New passwords are checked against known data breaches with Have I Been Pwned’s k-anonymity service, which never receives the password or its full hash.

Your choices

From Account › Profile you can download all your data or delete your account. For anything else, write to support@passfas.com.