PrepArcade is an exam preparation platform for the SAT and the ACT. This policy explains what we collect when you use it, why we collect it, who else can see it, and what you can ask us to do with it. It describes how the product actually works rather than covering practices we do not have.
PrepArcade is powered by Business Fitness International LLC. If anything here is unclear, or you want something done with your data, write to support@preparcade.co.
1. Information you give us
Creating an account
To create an account we ask for an email address, a username, a display name and a password. You may also set a country and a profile picture.
Your password is never stored. We store a one-way hash of it, which is what your sign-in is checked against. Nobody at PrepArcade can read your password, and we cannot tell you what it is if you forget it. We can only send you a link to set a new one.
Setting up your preparation
Before you start, we ask which exam you are taking, your current score if you know it, your target score, your exam date, and how much time you can study. If you tell us a dream university, we store that too. All of it exists to build your study plan and to show you how far you are from your goal.
Things you write
If you use the in-app notepad, flag a question for later, or contact support, we store what you wrote so it is there when you come back.
2. Information created as you use PrepArcade
Most of what we hold is not information you typed. It is the record of your practice, and it is what makes the product work: without it there is no progress, no report and no plan.
- Diagnostic results: your answers, your score, and the strengths and weaknesses calculated from them.
- Skill Practice activity: which questions you saw, what you chose, whether it was correct, how long you spent, and which questions you flagged.
- Exam Simulator activity: every attempt, section, answer, flag, time spent, and the score report produced at the end. Past attempts are kept so you can reopen them.
- Skill and topic progress: accuracy per skill, mastery, and which lessons you have completed.
- XP, levels, streaks, coins, badges, academies and Mastery Points: the progression record behind your profile.
- Your study plan: the weeks and daily tasks generated for you, which ones you completed, and what carried forward.
- Daily challenges: which missions you completed and when.
- Leaderboard standing: your XP and country are used to place you on public leaderboards under your display name.
- Referrals: if you invite someone or arrive through an invitation, we record the link between the two accounts so credit is applied correctly.
Your leaderboard entry is visible to other students. It shows your display name, your avatar, your country and your XP. It does not show your email address, your scores, your answers or your study plan.
3. Technical information
When you sign in we set a cookie called pa_session in your browser. It is the only cookie PrepArcade sets. It is httpOnly, meaning scripts in the page cannot read it, and it lasts 30 days unless you sign out sooner. It holds a random session token and nothing else, and our database stores only a hash of that token, not the token itself.
This cookie is strictly necessary: it is how the site knows the requests coming from your browser are yours. It is the only cookie we set ourselves. The analytics provider described in section 4 may set its own storage in your browser while you are on a public page, and it is not used anywhere inside your account. We do not use advertising cookies or cross-site advertising trackers, and nothing here follows you to other websites.
Our servers keep ordinary operational logs of requests, which can include your IP address, the page or endpoint requested and the time. These are used to run the service, diagnose faults and detect abuse such as repeated failed sign-in attempts.
4. Analytics
We use a third-party website analytics provider on our public pages only: the home page, the free diagnostic page, the SAT vs. ACT guide, the referral pages and this policy. It helps us see which parts of those pages people read and where they get stuck, so we can make them clearer.
On those pages it can record the page you are on, how you scroll and move around it, what you click, your approximate location from your IP address, and your browser and device type. It does not receive your name, your email address, your password, your answers or your scores.
It is not present anywhere inside your account. The dashboard, Skill Practice, the Exam Simulator, the diagnostic, your study plan and your report carry no analytics of any kind. Your studying is not recorded by anyone but us, and what we record there is the activity described in section 2, which is the product itself.
There is no advertising software development kit anywhere on the site, and we do not sell or share this information with advertisers.
5. Payments
Paid subscriptions are handled by a third-party payment processor. When you subscribe you enter your card details on the processor's own secure payment page, not on ours. Card numbers never reach PrepArcade's servers and we never store them.
The processor tells us the outcome. We store only the identifiers and the status we need in order to run your subscription: a customer and subscription reference, which plan you are on, whether it is active, when it renews, and whether a cancellation is scheduled. Cancelling stops the next charge and leaves you with the period you have already paid for.
Your payment information is handled by the processor under its own privacy policy and its own security obligations.
6. Email
Account email, verification, password resets and messages about your account, is delivered through a third-party email service provider. Delivering an email means passing your email address and the message to that provider.
We use your email address to run your account. If we ever want to send you something that is not about your account, we will ask first.
7. Service providers we rely on
We use a small number of third-party service providers to run PrepArcade. Each one only receives what it needs to do its job, and each acts on our behalf:
- A hosting platform, which runs the application and the database your information is stored in.
- A payment processor, which takes payment for subscriptions (section 5).
- An email service provider, which delivers account email (section 6).
- A website analytics provider, on public pages only, which is described in section 4. Its script is loaded from an external network, so that network can see your IP address as part of the request.
The typefaces the site is set in are served by PrepArcade itself. Your browser does not contact an outside font network to display this site.
We do not sell your personal information, and we do not share it with advertisers.
8. Why we hold it
- To create your account and keep you signed in.
- To measure where you stand and build a study plan around it.
- To show you accurate progress, reports and explanations.
- To run XP, streaks, academies, daily challenges and leaderboards.
- To take payment for a subscription and give you what you paid for.
- To answer you when you contact support.
- To keep the service working, secure and free from abuse.
9. Security
Passwords are stored only as one-way hashes. Session tokens are stored only as hashes, so a copy of the database does not let anyone sign in as you. Traffic to the site is served over HTTPS. Payment card data never touches our servers. Administrative screens are restricted to accounts with an administrator role.
No system is completely secure. If we become aware of a breach affecting your information, we will act on it and tell affected users.
10. How long we keep it
We keep your account and your practice history for as long as your account exists, because that history is your progress, deleting it would delete your scores, your plan and your reports.
Sessions expire after 30 days. Password reset links expire shortly after they are issued and can be used once.
If you ask us to delete your account, we remove your personal information and your practice records. We may keep the minimum needed for legal, accounting or fraud-prevention reasons, such as a record that a payment occurred.
11. Your choices and your rights
You can, at any time:
- See and change your profile information in Settings.
- Change your target score, exam date and study schedule.
- Cancel your subscription from your profile. You keep the period you have paid for and the next charge stops.
- Sign out, which ends that session.
- Ask us for a copy of your data, ask us to correct it, or ask us to delete your account.
To make any of those requests, write to support@preparcade.co from the email address on the account. Depending on where you live you may have additional rights under local law; tell us what you need and we will deal with it.
12. Students under 18
PrepArcade is built for students preparing for the SAT and the ACT, and many of them are minors. We ask only for what the product needs, and we do not build advertising profiles or sell information about any user, minor or otherwise.
If you are under the age at which you can agree to this yourself where you live, please use PrepArcade with a parent's or guardian's permission. A parent or guardian who wants to see what we hold about their child's account, or wants it deleted, can write to support@preparcade.co and we will act on it.
13. Changes to this policy
If we change how the platform handles your information, we will update this page and change the date at the top. If a change is significant, we will make it clear in the product rather than relying on you to re-read this page.
14. Contact
Questions about this policy, about your data, or about anything else: support@preparcade.co.
PrepArcade is powered by Business Fitness International LLC.