What the site already says
Privacy
The site's answers about your data, collected on one page. Every quoted line below also ships on the surface it links; the rest states plain facts about how the site works.
Do I need an account? What do you collect?
Starting needs no account. An account adds more questions and a mock exam, and there are two ways to make one: with Google, or with an email address and a password. With a password we store a one-way scramble of it and never the password itself. Your scores and any practice runs you save live in your browser on your device, and a saved run is never uploaded. A few anonymous actions are counted so we can tell whether the proof gets used and where readers stop. Opening a citation, and clicking through to the official PDF, each send our server the state and the question number. Starting or finishing a mock exam sends the state, the format, and whether it passed. Reaching a set point in free practice, meeting the paid offer, opening a pricing page, and pressing the buy button each send the state and which moment it was. Asking somebody else to pay, and a payment coming back through one of those links, each send the state and nothing else. Coming back to practice on a later day sends the state and nothing else; your own browser keeps that day on your device, and the day itself is never sent. That is the whole list of what is counted: no cookies, no IP address stored, and no way to tie any of it to you. If you email a report to support@permitproof.org, that mail is sent by your own mail app and holds only what you chose to write; nothing on this site identifies you, so it cannot be tied to your practice.
The same answer, from the same file, on the FAQ.
Signing in
Signing in is optional, and there are two ways to do it. It carries your free account and your Pro pass.
If you sign in with Google, we store your email address, Google's own account number for you, and the id of your Stripe checkout, so that your pass can reach your other devices. That is the whole of what signing in stores. We do not receive your Google password, your contacts, or anything else from Google.
If you make an account with an email address and a password, we store the address you typed, an account number we generate at random, whether you have confirmed the address, the id of your Stripe checkout, and a one-way scramble of your password. That is the whole of what making an account stores. We never store the password itself. A one-way scramble can check that a password is right and cannot be turned back into it, so nobody here can read your password, and nobody who stole the file could either.
You can delete all of it yourself at any time.
What your account records
When you have an account, the questions you get wrong are recorded to it. That is what lets your mistake notebook follow you to any device you sign in on.
In the product's own words
The mistake notebook
“Every question you miss lands here, each with its proof, yours to read and to download.”
No ads
The California practice-test page
“Misses go to a mistake notebook, each with its proof. No ads.”
Clearing your data
Clearing this site's browsing data in your browser removes everything this browser is keeping. Your account is separate, and deleting it removes everything on it. The mistake notebook has its own Clear all control, and every saved practice run has a Remove control.
Device permissions
The site asks your browser for no device permissions: no location, no camera, no microphone, no contacts, no notifications.