Privacy Policy
Last updated October 12, 2026
This policy explains what information CCAF Guide (“we”, “us”) collects when you use ccafguide.com, how it is used, and the choices you have.
Information you give us
You can read the study guide, reference pages, glossary, and mock exam without an account. If you create an account, we store:
- your email address;
- your password, stored only as a one-way bcrypt hash (we cannot read it);
- your practice quiz sessions: the questions served, the answers you chose, scores, and timestamps.
We use this only to sign you in and show your dashboard and quiz history. We do not sell it or share it with advertisers.
Information stored in your browser
We use your browser’s local storage to remember your sign-in token, basic account details, and your light/dark theme choice. Quizzes in the public study guide are graded in your browser and are not sent to us.
Advertising and cookies
We use Google AdSense to show ads. Google and its partners, as third-party vendors, use cookies to serve ads based on your prior visits to this website and other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
- You can opt out of personalized advertising by visiting Google Ads Settings.
- You can opt out of some third-party vendors’ use of cookies for personalized advertising at aboutads.info or, in Europe, youronlinechoices.eu.
- Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
Where required (for example in the EEA, the UK, and Switzerland), you will be asked for consent before personalized ads are shown. You can also block or delete cookies in your browser settings.
Service providers
The site is hosted on Vercel, and account data is stored in a Neon Postgres database. These providers process data on our behalf and may keep standard server logs (such as IP address, browser type, and request time) for security and reliability. Optional support payments are handled by Gumroad under its own privacy policy; we never see your payment details.
Retention and deletion
We keep account data while your account exists. To delete your account and quiz history, or to get a copy of your data, email contact@ccafguide.com from the address you signed up with. Depending on where you live, you may have further rights to access, correct, or object to processing of your data, and to complain to your local data protection authority.
Children
CCAF Guide is intended for adults and professionals preparing for a certification. It is not directed at children under 13, and we do not knowingly collect their information.
Security
Connections to the site use HTTPS, passwords are hashed, and access to the database is restricted. No online service is perfectly secure, so please use a password you do not reuse elsewhere.
Changes
We may update this policy. The date at the top shows the latest revision. Questions? See the contact page.