Privacy policy

Here is everything, by where it comes from.

• A parent account.Your name and your email address. Your password is stored only as a hash, so nobody here can read it. We write to that address to run the account, to send notices about a subscription, and to send the weekly summary of your student’s practice, which you can switch off for each student from your dashboard.
• A student profile. A first name, a last initial, a username you or your student choose, and a timezone. We ask for no student email address and no student free text.
• The age check. Signing up asks for a birth month and year to confirm the student is 13 or older. We keep the yes-or-no answer with the date, the address the answer came from, and which version of this policy was in effect. We do not keep the month and year themselves. If the answer is no, we keep nothing at all about that person.
• Practice. The answers chosen, whether each one was right, and the scores worked out from them.
• Video lessons. Which lessons your student opened and how much of each one they watched. We use it to put them back where they stopped, and to tell whether the two modules the free week assigns are finished.
• Points, streaks and boards. Points, streaks and weekly standings worked out from practice your student has already done. What another student can ever see is a first name and a last initial, and only on a friends board both students agreed to. The whole-product board is switched off, and if it is ever switched on it will be something a family chooses to join.
• A subscription. If you subscribe, Stripe collects and holds the card. We never see it and we never store it. What we keep is the subscription itself: which student it is for, what it costs, whether it is trialing, active, paused or cancelled, the Stripe references that let us look it up, and the exact wording of what you signed up to.
• The practice diagnostic. The same answers and score. If somebody asks us to email the results, we keep the address they typed, the time we sent it, and whether the tips box was checked. Checking that box is what brings a short series of three emails about preparing for the ACT, and every one of them carries a link that stops them.
• An in-person application.This is the form a parent or guardian fills in to ask about classes with Andrew at the Cornelius office. It asks for your name, your student’s name, their grade, your email address and your phone number, and if you want to add them, a test date and a note. We forward it to the waitlist system described below and email it to Andrew so a new application does not wait for someone to open the waiting list. Our own records keep no copy of it here.
• Launch updates. The form on our updates page asks for a first name, an email address, and which of parent, student, educator or someone else you are. We keep those answers with the moment you agreed and the internet address it came from, and we use them for the one thing the box you ticked says: to write to you when the Online Classroom opens, and about it before then. Andrew reads this list and Resend delivers the mail, the same as our other email. We keep your address until you ask us to take it off: unsubscribing stops the mail and keeps a record of the address so it is never mailed again, and asking us to take it off deletes everything we hold for it. Every one of those emails carries a one-click unsubscribe link, which goes to /api/updates/unsubscribe on this site and needs no account and no password, and you can also write to the address in section 2. We do not sell this list and we do not lend it to anyone.
• Technical. The IP address a request came from, used to hold rate limits and to run the bot check, and error reports when something breaks.

We do not sell personal information and we do not hand it to advertisers. The companies below run parts of this service for us and see only what that job needs:

• Vercel hosts the site.
• Neon hosts the database.
• Resend delivers our email.
• Stripe takes the payments and holds the card details. The card number never reaches our systems, and we could not show it to you if you asked.
• Mux delivers the video lessons. Its account is set to leave no cookies and to run no analytics on your student.
• Cloudflare runs the quick security check on the signup form, the diagnostic form, the in-person application form, and the launch-updates form, which reads the IP address of the request. The check runs in the background with nothing to click. What Cloudflare collects when it runs is set out in its Turnstile Privacy Addendum.
• Upstash holds the counters behind our rate limits.
• Sentry receives our error reports. We turn off the personal details it would collect by default, and we strip more before anything is sent.
• The waitlist system at schedule.bennetttestprep.com receives in-person applications. It is run by the same tutoring practice as this site, and it is where Andrew works his waiting list from.

Information about you leaves our own systems in six places, and here they are, one by one: our error reports go to Sentry with the personal details taken out of them, an in-person application goes to the waitlist system, the email that tells Andrew an application arrived carries what you typed and travels through Resend like our other mail, checkout hands Stripe your name and your email address so it can take the payment, starting a lesson asks Mux for the video and gives it the connection your student is watching on, and a launch-updates sign-up sends two emails through Resend, the note that tells Andrew somebody signed up and the welcome that goes to the person who did.

We would also hand something over if the law required it, and we would tell you unless we were forbidden to.

Cookies

There are seven, and none of them is for advertising.

• bc_anon is a random id with nothing about you in it. We set it when you arrive on our home page, the pricing, FAQ, in-person and updates pages, the signup page, or any of the practice diagnostic pages, and it lets us count how many people who arrive go on to try the diagnostic. It lasts 180 days.
• The practice diagnostic cookie is how a browser gets back to a diagnostic it started. It lasts 30 days. (It is called bc_diag, and on the live site it carries the stricter locked-to-this-site prefix browsers offer, so you may see it written as __Host-bc_diag.)
• The sign-in cookie keeps you signed in once you have an account. It lasts 30 days, and signing out ends it.
• bc_signin_hintholds one thing, your student’s username, for five minutes. It is there for the moment a parent signs in on a shared computer and hands the keyboard over, so the sign-in box already has the right username in it. Your student still types their own password.
• bc_sitting marks which set of practice questions is open, so a set carries on from one page to the next. It lasts four hours.
• bc_theme holds the theme you picked, light or dark and nothing else, so the next page you open is already in it. We set it only at the moment you pick one, and we never use it to follow you. It lasts one year.
• bc_rail remembers whether you hid the course menu beside the lessons on a wide screen, open or hidden and nothing else, so the next page opens the same way. We set it only when you press the button that hides or shows that menu, and we never use it to follow you. It lasts one year.

All seven are set by us and travel only over HTTPS. Five of them are marked HttpOnly, so no page script can read them. bc_theme and bc_rail are the two that are not, and they cannot be: the page itself writes each one in your browser the moment you click, which is what changes the screen right then, and a page can read what it writes. Each holds one word, the choice you made, and nothing else.

How long we keep things

• Account and student profile information stays until you ask us to delete it. We do not expire accounts on a timer.
• Lesson progress, points and streaks sit with the student profile and go when it goes.
• A subscription record, including the exact wording of what you signed up to, is kept for three years. The federal rule about online subscriptions asks us to be able to show what you were told, and that is the record that can. It is a minimum we hold to rather than a timer that removes anything.
• If you have the account deleted, that payment record stays with your family taken out of it. It keeps its Stripe reference, and Stripe holds the billing details you gave it, which is the honest thing to say rather than to claim a deletion that reaches inside somebody else’s system.
• A practice diagnostic can be opened for 30 days after it is taken. After that the emailed link and the browser that took it stop working. The answers and the score stay in our records until somebody asks us to delete them.
• An email address given for diagnostic results stays until you ask us to remove it, or until you unsubscribe if you asked for tips.
• An address given for launch updates stays until you ask us to remove it; unsubscribing stops the mail and keeps a record of the address so it is never mailed again. Nothing on that list expires on a timer, and the unsubscribe link at the bottom of every one of those emails takes effect the moment you follow it.
• An in-person application is not kept in our own records here. We pass it to the waitlist system as it is submitted and that system holds it from then on, and the note telling Andrew it arrived sits in his mailbox as email. To have one removed, write to the address in section 2 and we will take it out of the waiting list.

Sign in and you can change your own name and password and your students’ details at any time.

For anything else, email bennetttestprep@gmail.com from the address on the account and say what you want. To have it all removed, ask us to delete the account. If a subscription is still running we cancel it first, so nothing is charged to a card for an account that no longer exists. Then we delete the parent account and every student profile on it. Practice answers stay in the system with the person stripped out of them, so the question statistics they feed stay honest and there is nothing left tying them to your family.

If your student took the practice diagnostic without an account and you want it gone, tell us the email address the results were sent to and we will remove it.

The results page also carries a “Remove them from this browser” control. That one clears the browser’s access and deletes nothing, which is what a shared or library computer needs.

When this policy changes we post the new version on this page and update the date at the top. If the change matters to what we collect or who sees it, we say what changed right here rather than leaving you to compare two versions.

What changed on October 1, 2026

• The quick security check now runs in the background with nothing to click. The Cloudflare entry in section 1 links to Cloudflare’s Turnstile Privacy Addendum, which says what Cloudflare collects when the check runs.

What changed on September 8, 2026

• We opened a form for launch updates, and section 1 says what it collects: a first name, an email address, which of parent, student, educator or someone else you are, the moment you agreed and the internet address it came from. It also says who reads the list, how long we keep an address, and the one-click unsubscribe link every one of those emails carries.
• The count of where information leaves our systems moved from five to six. The new one is the pair of emails a sign-up sends, the note to Andrew and the welcome to you, both through Resend.
• The updates page joins the pages that set the bc_anon cookie, and its form joins the forms the quick security check runs on. Both lists in section 1 name it.

What changed on September 3, 2026

• The classroom gained a control for choosing light or dark, and it sets a cookie so the choice sticks. The cookie list in section 1 now has six entries rather than five, and it says that this one is the only cookie a page can read, because the page is what writes it when you click.

What changed on September 2, 2026

• We described the parts of the product that had grown since this page was last written: a subscription, video lessons, and the points, streaks and weekly boards. Section 1 says what each of them collects, and it now also says what we write to your email address about, including the weekly summary and its off switch.
• We added Stripe and Mux to the list of companies that see something. Checkout hands Stripe your name and your email address so it can take the payment, and starting a lesson asks Mux for the video.
• We corrected the count of where information goes. Section 1 now enumerates five places and names each one, rather than giving a total that a new recipient can make wrong.
• We listed all five cookies. The page had named three, and the two it left out were the one that holds a student’s username for five minutes on a shared computer and the one that marks which practice set is open.
• We narrowed the sentence about the bc_anon cookie to the pages it is actually set on, which are named in section 1 rather than described as all of them.
• We said how long a subscription record is kept and what stays readable at Stripe after an account is deleted, and we said that a running subscription is cancelled before an account is deleted.

This version has been in effect since October 1, 2026.

Some browsers can send a Do Not Track signal, which asks a site to stop following you across the web. We do not follow anyone across the web, so there is nothing here for that signal to switch off, and we treat a request carrying it exactly like any other.

No other company is allowed to collect information about what you do on other websites through this one. There are no advertising scripts, no analytics scripts, and no social media buttons on any page here, and our content security policy blocks them from loading at all. The video player is the one piece of somebody else’s software on a lesson screen, and the account behind it is configured to leave no cookies and gather no audience data.

Accounts belong to parents and guardians. A student profile is made by the parent, and the classroom is for students 13 and older. If the age check says under 13, we stop there and keep no record of the person we turned away.

There is nowhere in the classroom itself for a student to write anything, so nothing a student writes there is shown to anyone else. The one box on this site that takes writing is the note on the in-person application, and that form is filled in by a parent or guardian and carries their words.

Questions about any of this go to bennetttestprep@gmail.com. A person reads it.

The terms of use are on their own page, at the terms of use.

Back to the Bennett Online Classroom