Legal
This notice explains how RPHprep uses cookies, browser storage, and similar technologies for its independent exam-preparation platform. It should be reviewed by a qualified Canadian lawyer before paid public launch.
RPHprep uses essential cookies for login, account security, session management, protected study access, and payment-related redirects. These include Auth.js session cookies that are intended to be HTTP-only and used only to keep the service working securely.
RPHprep may record hashed browser, device, and network signals to protect accounts, enforce the two-device student limit, support session review, and investigate suspicious access. When trusted hosting headers are enabled, RPHprep may also retain coarse country or region information, but not precise location. Raw patient information, real patient cases, recalled exam content, or confidential assessment material should never be entered into RPHprep.
Signed-in students can review, rename, and revoke device sessions in Settings. When a third device signs in, the least recently used device is signed out and a security notice may be sent. These controls protect an individual account and paid educational content.
RPHprep stores small browser preferences such as the student workspace sidebar state, and whether you have dismissed the cookie notice, in local storage. These preferences help the interface remember your choices on the same browser.
Stripe or another payment processor may use its own cookies or security technologies during checkout, fraud prevention, billing, cancellation, and receipt workflows. Payment card data should be handled by Stripe and should not be stored by RPHprep.
RPHprep does not currently use analytics or advertising cookies. No analytics, advertising, or marketing vendor is installed. Google Search Console may be used for search indexing and rankings without placing Google Analytics cookies on the site. Uptime, errors, and latency are monitored in Google Cloud, not through visitor tracking cookies. If optional cookies are added later, they will remain disabled unless you consent.
Privacy requests can be sent through support.