Privacy Policy

Last updated: 23 October 2026

1. Information We Collect

We collect the following types of information:

  • Account information: Name, email address, and profile image provided through Google sign-in
  • Usage data: Exam attempts, answers, scores, and progress data, including the code you run in coding exercises (koans) and whether it passed
  • Study plan: The certification you're preparing for and your exam date, if you choose to tell us
  • Email preferences: Whether you've agreed to receive marketing email, and when
  • Technical data: Browser type, device information, and IP address

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Track your exam progress and performance
  • Process payments and manage subscriptions
  • Send service-related communications
  • Send study tips, exam-date reminders and news about new content, only if you opt in. You can withdraw at any time with the unsubscribe link in any such email or in your account settings
  • Improve the Service based on usage patterns

3. Payment Information

Payment processing is handled by Polar.sh. We do not store your credit card details. Payment information is collected and processed directly by Polar.sh in accordance with their privacy policy and PCI DSS compliance standards.

4. Data Storage

Your data is stored securely in our database. We use industry-standard security measures to protect your information from unauthorized access, alteration, or destruction. Our application is hosted on Vercel and your data is stored in a managed PostgreSQL database provided by Neon, located in the United Kingdom.

Some of our service providers (including Vercel, Polar.sh and Loops) process data on infrastructure located outside the United Kingdom, including in the United States. Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent contractual protections.

5. Third-Party Services

We use the following third-party services:

  • Google OAuth: For authentication and sign-in
  • Polar.sh: For payment processing and subscription management
  • Vercel: For hosting and deployment
  • Loops: For sending email. If you opt in to marketing email, we share your name, email address, study plan, plan type (free or paid) and how you found us (see Cookies) with Loops

Each third-party service has its own privacy policy governing the use of your information.

6. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.

If you arrive from another website or from a link with campaign tags (for example a post we shared), we set one first-party cookie, cl_src, recording that source, such as “reddit”. It lasts 30 days and is read only by us. If you create an account, we save that source with it, so we know which channels bring people to CertLake. It contains no personal information and isn’t shared with advertisers. You can block or delete it in your browser without affecting the Service.

We do not use advertising or cross-site tracking cookies.

7. Data Retention

We retain your account and progress data for as long as your account is active. To delete your account, email us at support@certlake.com from your registered email address; we will confirm your request and remove your personal data within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Object to processing of your data

To exercise these rights, please contact us at support@certlake.com.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy, please contact us at support@certlake.com.