Privacy

Reading needs no account, and a reader who never signs in is never named here. This page says what changes when you do sign in.

Reading without an account

The chapters, the practice questions, the flashcards, the practice exams and the downloads all work with no account. Nothing about you is stored on our servers when you use them, only the two small cookies described below, which live in your own browser. There is nothing to opt out of, because there is nothing being kept about you.

What an account stores

Your email address. Your password goes to our sign-in provider, Supabase, which keeps only a hash of it: a scrambled form that cannot be turned back into the password. We never see it or store it.

And your progress, which is the whole point of the account: the sections you have read, the answers you give to questions, how you rate each flashcard, the practice exams you sit and how you scored, your exam date and the plan you are working, the display name you choose, and your time zone.

Where it is kept

In a Supabase database hosted in the United States. The site itself runs on Cloudflare, which serves the pages to you. Those two companies and nobody else hold what is listed above on our behalf.

What we do not do

We do not run advertising. We do not sell, rent or trade your data, and we do not pass it to anyone building a profile of you. We do not track you across other sites.

Visit counts

We use Cloudflare Web Analytics to count visits: how many people opened a page, and roughly on what kind of device. It sets no cookies, and the counts are totals rather than records about a person. It runs only when we have switched it on with a token.

Cookies

We set three. One holds your sign-in session, so you stay signed in. One remembers whether you chose the light or dark theme. One remembers whether you collapsed the sidebar. None of them follows you to another site, and none of them is used for advertising.

Emails we send

Two, and only when you ask for them: the message that confirms a new account, and the message that resets a forgotten password. Both are sent by our sign-in provider. There is no newsletter and no marketing mail.

Deleting your account

Go to Settings, then Delete account. That removes the account, your email address, and every row of progress stored with it. It happens straight away and it cannot be undone. If you would rather we did it, write to hello@openbarreview.com and ask.

Your rights

You can ask to see what we hold about you, ask us to correct it, or ask us to delete it. Write to hello@openbarreview.com. Deleting is also in your own hands, in Settings, as above.

Children

This is a course for people preparing for a professional licensing exam. It is not aimed at children, and accounts are not meant for anyone under 16.

Changes to this page

If what we do changes, this page changes with it and the date at the top changes too. There is no other version.

Contact

Questions about any of this: write to hello@openbarreview.com.