Privacy Policy

Last updated September 26, 2026

Cramfox collects as little as it can: your email if you sign in, what you practice, and what you write for free-response practice. No names, no birthdates, no ads, and we never sell your data.

What we collect

• Your email address, only if you sign in or save your progress. It is how you sign in, and where sign-in codes and, only if you turn them on, practice reminders go. If you sign in with Google, Google tells us that address and that it has verified it; we ask your Google account for nothing else.
• Your practice activity: the questions you answer, your answers and how long they took, test and exam results, and the per-topic progress we work out from them.
• Free-response answers: the text you write, kept so we can mark or grade it and show it back to you.
• Purchases: your plan, its dates, and Stripe's customer and subscription IDs. Stripe collects your payment details, and we never see your full card number.
• Settings: your course, where your class is, study dates you set, and, if you turn on reminders, your time zone and preferred hour.
• Basic usage events, such as a completed practice set or a limit reached, so we can see what works. We also note which kind of link brought you here (like “tiktok” or “a friend's invite”), so we know where students find us. That's a channel name, not the page or person you came from. We use no third-party advertising or analytics trackers.

Cookies

A few first-party cookies that the site needs to work, and no advertising cookies:

• cf_session keeps you signed in, or keeps your guest progress, on this device.
• cf_tz stores your time zone, so “today” resets at your midnight.
• cf_player is an anonymous key, so the Daily 5 remembers your result.
• cf_flash holds a short message after an action, and expires within a minute.
• cf_ref remembers which kind of link first brought you here, for 30 days.
• cf_invite holds a friend's invite code until you start, so the week of Pro reaches you both.

How we use it

To run Cramfox: signing you in, saving and showing your progress, choosing what to practice next, grading free-response answers, processing purchases, sending the emails you ask for, preventing abuse, and fixing and improving the product. We don't sell your data or use it for advertising.

Who processes it for us

• Microsoft Azure hosts the site and its database. Azure OpenAI Service grades the free-response answers you send for grading; Microsoft doesn't use that data to train its models.
• Stripe handles payments.
• Resend delivers our emails.
• Google confirms your email address, if you choose to sign in with Google.
• Cloudflare runs our domain's DNS.

Each processes data only to provide its service to us.

Keeping and deleting your data

We keep your data while your account exists. Email hello@cramfox.com from your account's address and we will delete your account and its practice history within 30 days. Purchase records may be kept where tax or accounting law requires it. Guest progress is tied to your browser's cookie, so clearing cookies disconnects it.

Children

Cramfox is for students 13 and older. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us an email address, contact us and we will delete it.

Your choices

You can use Cramfox without an account. You can turn reminders off at any time, and every reminder email has an unsubscribe link. You can ask us for a copy of your data, or to delete it.

Security

Sign-in links work once and expire after 15 minutes. Sessions are signed and kept in HTTP-only cookies, and traffic is encrypted. No system is perfectly secure, but we work to protect your information.

Changes

When this policy changes we update the date at the top, and if a change is significant we say so on the site.

Contact

Questions, refunds, or a request about your data: hello@cramfox.com.