Legal
Privacy Policy
What we collect, why we collect it, who helps us run the site, and the choices you have.
Last updated October 11, 2026
The short version
- We collect only what we need to run your account: your name, your email address, and which lessons you have completed.
- We do not sell your personal information, and we do not share it for advertising.
- There are no advertising tools, no analytics trackers and no social media pixels on ToucanPass, and ToucanPass itself sets no cookies.
- You can ask us at any time to see, correct or delete your information.
1. Who this policy covers
This policy explains how ToucanPass ("we", "us", "our") handles personal information when you visit our website, create an account, use the course, or contact us. It applies alongside our Terms and Conditions.
2. Information we collect
Information you give us
- Account details: your first name, last name, email address and password. Your password is stored by our sign-in provider in a protected (hashed) form, and we never see it in readable form.
- Your agreement to our Terms: when you sign up, we record which version of the Terms you agreed to and when.
- Messages: if you use our contact form, your name, your email address and what you write.
- Access codes: if you redeem an access code, which code you used, when, and the access period it gives.
Information created as you use the course
- Lesson progress: which lessons and study activities you have completed, and when. This is saved to your account so it follows you between devices.
Information collected automatically
Like any website, when your browser loads a page, file, font or video, the server that delivers it receives standard technical information such as your IP address, browser type, device type and the address of the page requested. Our hosting and service providers may keep this in routine server logs for security and to keep the service running. We do not use this information to build a profile of you.
We do not use analytics services, advertising networks, social media pixels, session recording or browser fingerprinting.
3. Information stored in your browser
ToucanPass does not set cookies. The site does use your browser's local storage, which keeps information on your own device, for these purposes only:
| What | Why |
|---|---|
| Your sign-in session | Keeps you logged in between pages and visits. Removed when you log out. |
| Quiz progress and recent results | Lets you resume a quiz and see your recent scores. This is kept only on your device and is never sent to us, so clearing your browser data also clears your quiz history. |
| Saved copies of lesson content | Lets flashcards and quizzes load when your connection drops. |
| An access code you entered | Holds the code until you log in, so it can be applied to your account. Removed once it is applied. |
All of these are needed for features you choose to use, and none of them is used to track you. You can clear them at any time through your browser settings.
4. How we use your information
- To create and secure your account and sign you in.
- To save your lesson progress and show it back to you.
- To send emails about your account, such as confirming your email address and resetting your password.
- To reply when you contact us.
- To keep the service secure, prevent abuse, and fix problems.
- To keep a record that you agreed to our Terms, and to meet our legal obligations.
We do not send marketing emails. If we ever want to, we will ask for your permission first.
5. Who we share information with
We share information only with the service providers that help us run ToucanPass, and only what each one needs to do its job:
| Provider | What it does for us |
|---|---|
| Supabase | Stores your account, your lesson progress and the course content, handles sign-in, and sends account emails. |
| Hostinger | Hosts the website files. |
| Bunny.net | Hosts and streams the video lessons. Its video player loads on lesson pages and receives standard technical information when it does. |
| Formspree | Receives and delivers messages sent through our contact form. |
| Google Fonts | Delivers the typeface used on our public pages, and receives standard technical information when it does. |
| esm.sh | Delivers a code library the course pages use to connect to Supabase, and receives standard technical information when it does. |
Each provider handles information under its own privacy policy. We may also disclose information if the law requires it, to protect the safety or rights of our users or others, or as part of a reorganisation, merger or sale of the service, in which case this policy would continue to apply to your information.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. We do not disclose personal information to third parties for their own direct marketing.
6. Do Not Track and Global Privacy Control
We do not track you across other websites, and we have not placed any advertising or analytics tools on ToucanPass. Because we neither sell nor share personal information, there is nothing for a Do Not Track or Global Privacy Control signal to switch off, and the site works the same way whether or not your browser sends one. If that ever changes, we will honour those signals as the law requires and update this policy first.
7. How long we keep information
- Account details and lesson progress: for as long as your account exists. When you ask us to delete your account, we delete it and the data linked to it within 45 days, except anything we must keep to meet a legal obligation.
- Your agreement to our Terms: for as long as your account exists, and afterwards only as long as reasonably needed to deal with any dispute.
- Contact messages: for as long as we need them to answer you and keep a reasonable record of the conversation.
- Server logs: for the periods our providers set for security and operations.
8. Your choices and rights
You may ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong; or
- delete your account and the personal information linked to it.
To make a request, use our contact form and send it from the email address on your account, so we can confirm the request is really from you. You may also have an authorised agent make a request for you; we may ask the agent for proof that you gave permission. We will answer within 45 days.
If you live in California, the California Consumer Privacy Act may give you rights to know, delete and correct personal information and to limit or opt out of certain uses. We offer the rights above to everyone, whether or not that law applies to us. We will not treat you differently for exercising any of these rights.
9. Children
ToucanPass is meant for people preparing for a professional licensing examination and is not directed to children. You must be at least 16 to create an account, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, please contact us and we will delete it.
10. Security
Connections to ToucanPass and our providers are encrypted. Access to account data is restricted so that each user can read only their own records, and passwords are stored only in hashed form. No system is perfectly secure, so we cannot guarantee absolute security, and we will notify you if the law requires us to after a breach.
11. Where information is processed
ToucanPass is operated from the United States. Our providers may process information in the United States and in other countries where they or their delivery networks operate.
12. Changes to this policy
We will post any update on this page with a new "Last updated" date. If a change is significant, we will also give you notice before it takes effect, for example by email or by a notice when you log in.
13. Contact us
Questions or requests about your privacy? Use our contact form, and if it concerns your account, send it from the email address you signed up with.