Privacy Policy
Last updated: July 24, 2026
SAT Game Prep ("we," "us," "our") operates SAT Game Prep at https://satgameprep.io (the "Service"). We built this Service as a free study tool and we take privacy — especially children's privacy — seriously. This policy explains what we collect, why, and the choices you have. It is written to reflect the U.S. Children's Online Privacy Protection Act (COPPA), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other applicable U.S. state privacy laws.
1. Information we collect
We practice data minimization — we collect only what the Service needs to work. If you write to us through the feedback or contact form we also store the name, email address and message you provide, plus the IP address the message came from (to block spam), for up to 30 days.
Information you provide
- Account details: a name or nickname, email address, password (stored only as a secure one-way hash), birth year, and target score.
- Parent/guardian details (required for every account, at any age): a parent's name and email, used for account approval, consent where the student is under 13, and progress updates.
Information created as you use the Service
- Learning progress: questions answered, scores, XP, streaks, badges, and practice-test results.
- Preferences: such as your chosen focus-music option.
- Optional, anonymous score calibration: after a real test, you may choose to tell us your official score together with the estimate this site gave you. The stored record holds only those numbers and the date — no name, account, email address or IP address. One honest caveat: submitting it counts against the same abuse limit every form here uses, which briefly records your IP address in a separate table for 24 hours, so for that day the two could in principle be lined up by someone with database access. After 24 hours that is gone and the score report stands alone. We use these reports solely to publish how accurate our estimates are.
Limited technical information
- Security logs: we temporarily record IP addresses to prevent abuse (rate-limiting sign-ups and logins). These are automatically purged.
- Aggregate visit counts: to understand how many people use the site, we count unique visitors and pageviews using a one-way, salted hash of your IP address and browser name. That hash cannot be reversed: we do not store your raw IP address for this, we set no analytics cookies, and we use no third-party trackers. Counting is done by a small script on the page that sends up to three very short messages to this same website: one a couple of seconds after the page loads, one if the page stays on your screen for fifteen seconds, and one if you answer a practice question. Each message says only which page it was and how long it had been on screen. Nothing is sent anywhere else, and if you have JavaScript turned off you are simply not counted. We also record how many visits lasted more than fifteen seconds and how many included answering at least one practice question, again as plain totals. These counts are aggregate and are never used to identify or profile you.
- We do not use advertising trackers, third-party analytics that profile users, or social-media pixels.
2. How we use information
- To create and secure your account and keep you logged in.
- To save and show your learning progress and practice-test history.
- To send account emails (password reset, parent approval) and, if opted in, progress updates to a parent/guardian.
- To protect the Service from fraud, abuse, and security threats.
- To comply with law.
We do not use children's information for behavioral advertising or profiling, and we do not condition participation in an activity on disclosing more information than is reasonably necessary.
3. How we share information (we don't sell it)
We do not sell or share your personal information for advertising, and we never sell children's data. Our typefaces are served from our own domain rather than from a third-party font service, so no outside company receives your IP address when a page loads. We disclose information only:
- To service providers that host the Service or deliver email on our behalf, under obligations to protect the data and use it only for those services.
- For legal reasons, if required by law or to protect rights, safety, and security.
- With a parent/guardian regarding their own child's account.
4. Children under 13 (COPPA)
See our dedicated Children's Privacy Notice for full details. In summary: for users under 13, the account is created locked and unusable and stays that way until a parent or guardian clicks an approval link we email them; that click is the consent step, we collect only the limited information described above, and a parent may review, export, or delete their child's information at any time by contacting privacy@satgameprep.io.
5. Your privacy rights
Regardless of where you live, you (or a parent for a child's account) can:
- Access / download your data — use "Download my data" on your Account page.
- Correct your name and study settings from the Account page. To correct your email address or birth year, email privacy@satgameprep.io and we will update it.
- Delete your account and all associated data from the Account page or by emailing us.
- Withdraw consent or opt out of parent updates at any time.
To make a request by email, contact privacy@satgameprep.io. We will not discriminate against you for exercising these rights.
6. California residents
If you are a California resident, we voluntarily extend to you the access, deletion, correction and non-discrimination protections modelled on the CCPA/CPRA, even though this free, non-commercial project is unlikely to meet the statute's definition of a covered "business". Please see our California Privacy Notice.
7. How we protect information
- Passwords are stored using strong one-way hashing — never in plain text.
- All pages are served over encrypted HTTPS.
- Database access uses parameterized queries to prevent injection, and forms are protected against cross-site request forgery.
- Sign-in and sign-up are rate-limited to deter attacks, and sessions use secure, http-only cookies.
No online service can guarantee perfect security, which is why we deliberately collect as little personal information as possible.
8. Data retention
We keep account and progress data only as long as we need it to run the study tool. Specifically: an account and its learning progress are kept while the account is in use and are deleted after 24 months of no sign-in; an account that a parent or guardian never approves is deleted, along with the parent's contact details, 30 days after sign-up; practice-test results are deleted with the account. We do not retain children's personal information indefinitely. When you delete your account we delete your account record, your learning progress and your practice-test results immediately. Copies of transactional emails we sent you (for example an approval or password-reset message) sit in a server-side mail log that is access-restricted and automatically deleted after 30 days, and any feedback or contact message you sent us is deleted within 30 days of your account deletion. If you want those removed sooner, email privacy@satgameprep.io. Abuse-prevention logs (the IP addresses used for rate-limiting) are deleted automatically after 24 hours, and our aggregate visit hashes after 150 days. Server-side copies of transactional emails and any IP address attached to a feedback message are kept in an access-restricted location and deleted after 30 days.
9. Cookies
We use a small number of strictly-necessary cookies: sgp_sid to keep you logged in, and — only if you switch the site's language — sgp_lang to remember that choice. Your cookie-notice choice and a copy of your progress are kept in your browser's local storage, not in a cookie. See our Cookie Policy.
10. Changes & contact
We will post any changes here and update the date above; significant changes affecting children's data will be communicated to parents where required. Questions or requests:
SAT Game Prep
Contact us by email and we will provide a mailing address.
Email: privacy@satgameprep.io