This Privacy Policy explains what information ClusterPrep ("ClusterPrep," "we," "us," or "our") collects, how we use and store it, who we share it with, and the choices and rights you have.
1. Who we are
ClusterPrep is a free, non-commercial web application that helps students practice for DECA Career Cluster competitive exams. ClusterPrep is operated by an independent developer, based in the United States.
If you have any questions about this policy or your data, contact us at clusterprep@gmail.com.
2. Scope
This policy applies to the ClusterPrep web application and any related pages we operate. It does not apply to third-party websites or services we link to (for example, MBA Research, or external study resources), each of which has its own privacy practices.
3. Information we collect
We collect only the information needed to run the app. Specifically:
| Category | What it includes | How we get it |
|---|---|---|
| Account information | A username you choose, and a password. Your password is never stored in readable form — it is converted to a salted cryptographic hash and only the hash is stored. | You provide it when you create an account or log in. |
| Study & usage data | Which practice exams and questions you attempt, the answers you select, scores and accuracy, your wrong-answer history by topic, flashcard progress, daily streaks, and your selected cluster and settings. | Generated automatically as you use the app. |
| Leaderboard data | Your username together with aggregate statistics such as questions answered, accuracy, streak, and score. | Derived from your usage if you are logged in. |
| Technical/device data | Data stored locally in your browser (via localStorage) to keep you signed in and remember your progress on that device, and basic request data (such as IP address and browser type) processed by our hosting and database providers to deliver the service and for security. | Automatically through normal use. |
What we do not collect: we do not ask for your real name, email address, phone number, mailing address, date of birth, precise geolocation, or any payment information. We do not run third-party advertising or analytics trackers, and we do not build advertising profiles about you.
4. How we use your information
- To create and authenticate your account and keep you logged in.
- To save your study progress and sync it across your devices.
- To calculate and display per-cluster leaderboards and statistics.
- To operate, maintain, secure, debug, and improve the app.
- To comply with legal obligations and enforce our terms.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are defined under U.S. state privacy laws such as the CCPA/CPRA).
5. Legal bases for processing (EEA/UK users)
If you are in the European Economic Area or the United Kingdom, we process your data on these legal bases under the GDPR/UK GDPR: performance of a contract (to provide the account and features you request); legitimate interests (to secure, maintain, and improve the service, and to operate the leaderboard); and, where required, your consent, which you may withdraw at any time.
6. How and where your data is stored
Your account and progress data are stored in two places:
- On your device, in your browser's local storage, so the app works and remembers your state.
- In our cloud database, Google Firebase Cloud Firestore, so your account and progress can sync across devices. The app is hosted on Render.
These providers process your data on our behalf and may store and process it on servers located in the United States and other countries (see International transfers).
7. Security
We take reasonable technical measures to protect your information, including storing passwords only as salted hashes and serving the app over encrypted HTTPS connections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Because ClusterPrep is a study tool, please do not reuse an important password (such as your email or bank password) for your ClusterPrep account, and do not enter any sensitive personal information into the app.
8. Service providers & third parties (sub-processors)
We rely on the following providers to operate the app. They may process limited data (such as your stored profile, or technical data like IP address) strictly to provide their services to us:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Google Firebase / Cloud Firestore (Google LLC) | Cloud database for accounts, progress & leaderboard sync | firebase.google.com/support/privacy |
| Render | Web application hosting | render.com/privacy |
We may also disclose information if required by law, subpoena, or other legal process, or to protect the rights, safety, or property of ClusterPrep or others.
9. Cookies & local storage
ClusterPrep does not use advertising or third-party tracking cookies. We use your browser's localStorage — a similar technology — to keep you signed in and store your study progress on your device. You can clear this at any time through your browser settings or by logging out, though doing so will remove locally stored progress on that device.
10. Information visible to others
If you are logged in and active, your username and aggregate statistics may appear on public leaderboards visible to other users of the app. Choose a username that does not reveal personal information you wish to keep private.
11. Data retention
We keep your account and study data for as long as your account exists and you continue to use the app, so your progress is preserved. You may request deletion at any time (see Section 13). We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.
12. Children's privacy
ClusterPrep is intended for students 13 years of age and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account or use the app.
If you are between 13 and the age of majority in your jurisdiction (or, in the EEA/UK, under the applicable digital-consent age, which may be up to 16), you should review this policy with, and obtain the consent of, a parent or guardian before using the app.
If we learn that we have collected personal information from a child under 13 (or under the applicable minimum age) without the required consent, we will delete it promptly. Parents or guardians who believe their child has provided us information may contact us at clusterprep@gmail.com and we will delete it.
13. Your rights & choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — ask us to delete your account and associated data.
- Portability — request your data in a portable format.
- Restriction / objection — ask us to limit or stop certain processing.
- Withdraw consent — where processing is based on consent.
- Non-discrimination — we will not deny you service for exercising your rights.
You can delete locally stored data yourself by logging out or clearing your browser storage. To exercise any other right — including deleting your synced account data — email us at clusterprep@gmail.com and we will respond within the time required by applicable law (generally within 30–45 days). We may need to verify your identity (for example, by confirming control of the account) before acting on a request.
EEA/UK users also have the right to lodge a complaint with their local data protection authority. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right to opt out of "sale" or "sharing" of personal information — note that we do not sell or share personal information as defined by that law.
14. International data transfers
We and our providers are based in or use infrastructure in the United States. If you access ClusterPrep from outside the United States, your information will be transferred to, stored, and processed in the United States and possibly other countries whose data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses provided by our processors) for such transfers.
15. Data breach
If we become aware of a security incident affecting your personal information, we will take reasonable steps to investigate and remediate it and will notify affected users and relevant authorities where required by applicable law.
16. Links to other sites
The app may reference or link to third-party content and websites (for example, exam source material from MBA Research). We are not responsible for the privacy practices of those third parties; please review their policies separately.
17. Governing law
ClusterPrep is operated from the United States. This Privacy Policy and any dispute arising from it are governed by the laws of the United States and the state in which the operator resides, without regard to conflict-of-laws principles. Where applicable, the rights described in Section 13 are provided to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the federal Children's Online Privacy Protection Act (COPPA), and — for visitors located there — the EU/UK General Data Protection Regulation (GDPR).
18. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you (for example, by posting a notice in the app). Your continued use of ClusterPrep after an update means you accept the revised policy.
19. Contact us
Questions, requests, or concerns about this policy or your data — including requests to access or delete your data — can be sent to:
- Operator: ClusterPrep (operated by an independent developer, United States)
- Email: clusterprep@gmail.com