Privacy Policy
Last Updated: September 2026 • Phase 4 Production Release
1. Information We Collect
Way2Cert collects account credentials (email address, display name), authentication metadata from authorized OAuth providers (such as Google), and simulation telemetry (e.g., domain score percentages, completion timestamps, and practice attempt history) to evaluate candidate readiness and preserve personalized study progress across sessions.
To prevent abusive account sharing and maintain session security, we collect temporary device identifiers (user agent summary, creation timestamp) and a one-way cryptographically salted SHA-256 hash of your IP address. We never store or log your raw IP address in session tables.
2. How Your Information Is Used
Collected information is used exclusively to deliver simulation experiences, compute objective readiness scores, and enforce our single-user seat security policies. We never sell personal data or exam performance telemetry to third parties.
3. Infrastructure & Security Partners
Way2Cert utilizes industry-leading cloud and billing partners:
- Paddle: Acts as our Merchant of Record, processing payments, taxes, and invoicing under PCI-DSS compliant infrastructure.
- Supabase: Manages secure database storage with strict Row-Level Security (RLS) enforcement.
- Vercel: Powers global edge network delivery and application hosting.
4. Contact Us
If you have questions regarding our data practices or wish to request data deletion, contact us through our official project channels or repository.