What we collect
- Your account: your name, your email address, and a one-way hash of your password. We never store the password itself.
- Your progress: which lessons you have opened and finished, where you stopped in each one, and how much time you spent.
- Your quizzes and exams: the answers you submitted, the score, and whether you passed.
- Your certificates of completion: the course, the date you finished, and the name printed on the certificate.
- Your purchase: what you bought and the Stripe reference for it. Card details go straight to Stripe and never reach us.
- Security records: for every sign-in, registration and password-reset attempt we record the email address that was used, whether it succeeded, and the IP address the request came from. That includes attempts made by visitors who have no account here, because an attacker working through a list of passwords does not have one either. Refusing to record those attempts is refusing to stop them. We also keep a row per active session so you can be signed out everywhere.
Cookies
One cookie, and it is strictly necessary: the session cookie that keeps you logged in after you sign in. It carries a random session id, nothing about you, and it is removed when you log out. There is no analytics cookie, no advertising cookie and no third-party tracker on this site, which is why you are not being asked to consent to one.
Why we hold it
To give you the course you paid for, to save your place in it, to grade your quizzes, to issue and verify your certificate of completion, to email you about your own account, and to keep the accounts secure. That is the whole list.
Who else touches it
Four companies, each doing one job for us. We do not share your data with anyone else unless the law requires it.
- Stripe
- Takes the payment. Stripe receives your email and the item you bought, and holds your card details. We never see or store a card number.
- Resend
- Sends our email: the address confirmation, the password reset, the purchase receipt and the certificate link. Resend receives your email address and the message.
- Vercel
- Hosts and serves the site. Vercel processes the requests your browser makes, including your IP address, as part of running the site.
- Neon
- Runs the database, in the United States, where the records below are stored.
How long we keep it
Account data (your name, your email and your login) is kept while your account is open, and until you ask us to close it.
Security records are the shortest-lived thing here. A failed sign-in counts toward the 15-minute rate-limiting window, and a cleanup job runs once a day and deletes every attempt older than 24 hours, IP address included. Nothing keeps them beyond that, and there is no separate log of them.
Completion records are kept for five years from the date you finished: the enrolment, the lesson progress and time, the quiz and exam attempts, and the certificate of completion with the name that was printed on it. They are proof that a course was taken and passed, so they have to outlive the account they came from and they survive a deletion request.
Request deletion
Email info@waynecountytrafficschool.com from the address on the account and ask us to delete it. We anonymize the account rather than erasing the row: your name and email address are replaced with placeholder values, your password is replaced with a random one, and every session and pending email link is destroyed, so the login stops working immediately and nothing in the account points back to you.
The completion records above stay for the rest of their five-year retention period, including the holder name already printed on an issued certificate of completion. Otherwise a certificate someone else relies on could no longer be verified. Tell us in the same email if you also want us to revoke your certificates, and we will.
Seeing or correcting your data
Your account page shows your name, your email and your progress, and you can change your name there. For a copy of everything we hold, or a correction we cannot make ourselves, email us and we will answer within 30 days.
Children
This site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Security and changes
Passwords are hashed, sessions are stored server-side, and the site is served over HTTPS only. No system is perfect; if a breach ever affects your data we will tell you. If this page changes, the date at the top changes with it. Questions go to info@waynecountytrafficschool.com, and the terms cover the rest of the agreement.