Privacy Policy
Last updated: 20 October 2026
Short version: we collect as little as we can, we don't sell your data, and we don't use advertising or third-party tracking cookies.
What we collect
- Study progress, such as which questions you've answered, your scores and your exam date if you set one. This stays on your device. If you create an account, it is also saved to your account so it syncs across devices.
- Account details: your email address and a hashed password. These are stored by our database provider, Supabase.
- Purchase details: payment is handled by Stripe. We receive your email, the fact that you paid, when your 90-day access ends, and a Stripe customer reference. We never see your full card number.
- Feedback you choose to send, such as flagged questions, ratings and messages, plus an email address if you give one.
- Basic usage events, recorded by us and not by a third party: which of our pages you viewed (once per page per visit, including the page you arrived on), the readiness check (started and finished), an email signup for the section breakdown, checkout started, and purchase. A random session id is kept in sessionStorage for that visit only. It is not a cookie. If you arrived from a campaign link, we store the short labels on that link (utm_source, utm_medium, utm_campaign, utm_content, or a short r code) with those events. The events do not include your email address. A purchase is also tied to your account when you have one. Older events, such as the sample quiz and the Final Exam, may still use a random id kept on your device and, if you are signed in, your account. We don't use third-party analytics or advertising cookies.
- Results email: if you ask for your quiz results by email and tick the consent box, we store your email address and score and send you that one email.
- Deadline reminders: if you ask for your diagnostic breakdown and tick the consent box, we store your email, your section scores from that check, and an unsubscribe token. You can stop the reminders from the link in any email. We do not sell the list.
- To prevent abuse, we keep a short-lived, one-way hash of your IP address that changes every day.
Who processes it
Supabase (database and sign-in), Stripe (payments), Resend (sending email) and Netlify (hosting). Each only processes data to provide its service to us.
How long we keep it
We keep account and purchase records for as long as your account exists, plus any period the law requires for financial records. We keep feedback and usage events for up to 24 months.
Your choices
Email support@bizarreact.com to get a copy of your data, correct it, or delete your account. You can clear the data stored on your device at any time in More → Data.
CQE Quest is a product of Bizarre Act. Not affiliated with ASQ; CQE is a certification of ASQ. Questions: support@bizarreact.com (we reply within 48 hours).
Terms · Privacy · Refund policy