Privacy Policy

Effective October 23, 2026

Credit Sprint is a study site for AP® and CLEP® economics. We collect only what we need to run it, we don't sell personal information, and we don't show ads. This policy explains what we collect and what you can do about it.

What we collect

If you don't create an account, your study progress (answers, scores, streaks, pets, settings) stays in your browser tab and is erased when you close it. We don't receive it.

If you create an account, we store:

How you sign in: your email address (email codes), your Google account's email, account ID and first name (Google sign-in), or your username and a scrambled (hashed) version of your password. We never see or store your Google password, and we can't read your Credit Sprint password.
The name you choose for leaderboards. We show it as your first name and last initial only.
A profile picture, only if you upload one (this feature is coming soon). We shrink it to a small 128×128 image in your browser before it's sent, remove hidden photo data such as location, and check it automatically with our AI provider to make sure it's appropriate before other students can see it. If other students report it, we keep a record of who reported it so the same student can't report it twice.
Your study progress, so it can sync between your devices, and the XP you earn each week for leagues.
A sign-in cookie that keeps you signed in for up to 60 days.

When you use AI features (the AI tutor or AI free-response scoring, coming soon), the question and the text you type are sent to our AI provider to generate a response. Don't include personal information in those messages.

If you buy a paid plan, payment is handled by our payment processor (Stripe). Stripe shares your purchase details with us (such as your email and the plan you bought), never your full card number.

Basic technical information such as IP address and browser type is processed by our hosting provider to deliver the site and protect it from abuse.

How we use it

To run your account, sign you in and sync your progress.
To run weekly leagues and leaderboards.
To send sign-in codes and essential account emails. We don't send marketing emails without your permission.
To keep the site secure, prevent cheating and abuse, and fix problems.

What other students can see

In weekly leagues, other students in your group see your leaderboard name (first name and last initial), your profile picture if you uploaded one, and your XP for the week. They can't see your email, username, scores by unit or any other details.

Who we share it with

We don't sell or rent personal information. We share it only with service providers that help us run Credit Sprint, under their own privacy and security commitments:

Cloudflare: website hosting and our database.
Resend: delivering sign-in code emails.
Google: Google sign-in, only if you choose it, and Google Fonts, which loads the site's fonts (Google receives your IP address when fonts load).
Anthropic: the AI tutor and AI scoring when you use them, and automatic screening of profile pictures you upload.
Stripe: payments, only if you buy a plan.

We may also share information if the law requires it, or to protect the safety of our users or the public.

Students under 13

Credit Sprint accounts are for people 13 and older, and you must confirm your age to create one. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we'll delete it.

Your choices and rights

Delete your account any time: open the app, click your name in the sidebar, then Delete my account. This removes your account, saved progress, profile picture and league history from our servers.
Change your leaderboard name or remove your profile picture from the same account window.
Try the site without an account. Guest mode works without signing in, but guest progress isn't saved after you close the tab and guests can't join leagues.
Clear local progress by using Reset all progress in Settings or clearing your browser data.
Depending on where you live, you may have the right to access, correct or delete your information. Email us and we'll help.

How long we keep it

We keep account information while your account exists. When you delete your account, we remove it from our database right away. Sign-in codes expire after 10 minutes, and sign-in sessions after 60 days.

Security

Connections to the site are encrypted (HTTPS), passwords are stored only as salted hashes, sign-in cookies can't be read by scripts on the page, and email codes expire quickly and allow only a few tries. No system is perfectly secure, so please use a password you don't use anywhere else.

Changes to this policy

If we make important changes, we'll update the date at the top and post a notice on the site.

Contact us

Questions about this page? Email support@creditsprintprep.com.