Your privacy at CertGarden.
Last updated:
CertGarden stores practice progress in your browser’s localStorage. You do not need an account. We also process requests to run the website, use Google Analytics with your consent to understand site usage, and receive messages you choose to send. CertGarden is the site operator responsible for the data handling described here. For privacy questions, contact support@certgarden.com.
What is saved
Session identifiers, settings, question IDs and revisions, selected answer IDs, recorded results, bookmarks, and timestamps are saved locally. Question text, choices, answer keys, and explanations are not saved in localStorage or backups. Your theme preference uses a separate storage key. When you submit an answer, its question ID, revision, and selected answer IDs are sent to the server for grading. Your complete practice history is not uploaded or stored in an application database.
Device-local limitations
Storage is specific to a browser and website origin. Another device, browser, or domain does not automatically have your progress. Clearing site data, private browsing, storage restrictions, or browser eviction can remove it. Export a backup from Your progress before making changes. Questions and explanations require an internet connection. If a question revision is no longer available, its recorded result remains in your progress but its content cannot be reviewed.
Backups
Exported backups are readable JSON files. Keep them private if you do not want others to see your practice history. Importing validates the file and replaces local progress only after confirmation. Older saves and backups are converted to progress-only records; question content is removed when they are saved in this version. Previously downloaded files are not changed. Importing a backup processes the file in your browser; it does not upload the file to us.
Feedback and other messages
Feedback, certification requests, and question reports send the fields you enter to our support inbox when you choose Send message. Our public contact address is support@certgarden.com. We use these messages to respond to inquiries, investigate reports, and consider suggestions. Question reports also include the certification ID, question ID, revision, and bank version. Your optional email address allows us to reply. Messages are stored in our email inbox; deleting local progress does not delete them. You can contact that address about a message you sent. Your practice history and saved answers are not included. The sending endpoint uses your IP address for short-lived rate limiting.
Our forms and new practice sessions use Cloudflare Turnstile to reduce automated abuse. The verification widget communicates with Cloudflare, and our server sends the verification token and your IP address to Cloudflare to validate the check before sending a message or starting a quiz. The token is not included in the email or saved with your practice progress. Practice API requests also use your IP address for short-lived rate limiting.
Google Analytics and cookies
We use Google Analytics to measure visits and understand how people use the website. Google receives usage data such as page views, browser and device information, approximate location, and session activity. Analytics uses first-party cookies, including _ga and _ga_*, to distinguish visitors and sessions. This is separate from the local storage used for your practice progress and theme. See how Google uses information from sites that use its services and Google’s Analytics cookie information.
Google Analytics loads only after you choose Accept analytics in our cookie banner. Choosing Reject analytics, or leaving the banner unanswered, keeps analytics off. Practice progress, theme preferences, and security checks work independently of your analytics choice.
Open Cookie settings in the website footer to review or change your choice at any time. Rejecting analytics after accepting disables further measurement and clears accessible Google Analytics cookies for this website. It does not delete data already sent to Google.
We remember your choice in your browser’s local storage, separately from practice progress and theme preferences. The choice has no automatic expiry and applies to this browser and website origin until you change it or clear it. If browser storage is unavailable, the choice applies only to the current page session and we ask again on a later page load. Clearing this preference makes analytics default to off until you accept again.
Optional donations
Donations open our Buy Me a Coffee page in a new tab. Buy Me a Coffee and its payment processors handle payment and contact information under Buy Me a Coffee’s privacy policy. The site operator can view supporter information and donation details on Buy Me a Coffee. This application does not collect card details or send your practice progress to Buy Me a Coffee. Deleting local progress does not delete payment records held by Buy Me a Coffee, its payment processors, or the site operator.
Hosting and external links
Cloudflare hosts and delivers the website. Loading pages and using our APIs sends requests to Cloudflare, which may process IP addresses and request metadata. Cloudflare Workers logging is enabled to help diagnose errors and operate the service; request logs can include URLs, request times, and response status. These operational records are separate from your locally saved progress. Official-documentation and other external links take you to sites with their own privacy practices.
How long data stays
Local progress and your theme preference have no automatic expiry in this application. They remain until replaced, deleted, or cleared by your browser. Downloaded backups remain wherever you save them until you delete them. The application does not automatically delete messages from our support inbox; they may remain until removed from the mailbox. Contact us to request deletion of a message.
Analytics data and hosting logs are subject to the retention settings and policies of the relevant provider accounts. Cookie lifetimes are separate from retention of data already collected by Google. See Google’s data retention information. Contact us for information about the current retention settings.
Delete or move your data
Use the export, import, and confirmed deletion controls in Your progress. Deletion removes local practice history and bookmarks. It does not clear your theme or analytics consent preference or analytics cookies, delete downloaded backups, or remove messages, analytics data, hosting logs, or donation records held outside your browser. Use your browser’s site-data controls to clear local storage and cookies. Automatic cross-device synchronization is not implemented.
Privacy requests and policy updates
Contact support@certgarden.com to ask about this policy or request access to, correction of, or deletion of personal information we hold. Include enough context to identify the relevant message or record. We may need to verify your request. Because practice history stays in your browser, use the local export and deletion controls to manage it. Requests involving provider records depend on our ability to identify the data and the provider’s available controls and applicable requirements.
We will update this page when our data handling changes and revise the date above.