Privacy Policy

The short version

We collect what the app needs to work, and nothing for advertising.

• You can study without an account. Your progress then stays in your browser.
• With an account we store your email address, an optional name, your study progress (including your answers on exams and CARS passages, and the questions you missed) and your plan, so your progress syncs across devices.
• Stripe handles payments. We never see your card number.
• Nothing about you is shown to other learners unless you make a profile public, and even then only a handle you choose.
• No advertising, no tracking cookies, no selling or sharing your data for ads.
• With an account, download your data or delete your account from the Account page at any time. As a guest, Settings → Delete your data → Erase all progress deletes what this browser holds.

Who we are

ATP Quest is run by Griffin Blue, who is responsible for your data.

ATP Quest (“we”, “us”) is operated by Griffin Blue, 124 Langdon St, Madison, WI, USA. Under data protection law we are the controller of the personal data described here. Write to privacy@atpquest.com with any privacy question.

What we collect

Your account details, your study progress, your plan, what you choose to share with other learners, and a few technical records that keep the service running and safe.

If you study without an account

Nothing that names you. A random ID in a cookie (atpq_guest) lets us apply the free plan’s daily allowance, and we record which questions that ID was shown on which day. If you play a duel from a link as a guest, that ID is also saved with your run so it can be scored. Your progress is saved only in your browser and reaches us only if you later create an account and bring it with you.

If you create an account

• Account details: your email address, an optional display name, and your password, which our sign-in provider stores only as a salted hash. We also keep when the account was created, last signed in and confirmed its email, and which version of the Terms and this policy you accepted, and when.
• Google sign-in: if you use it, see Signing in with Google.
• Study progress: when each question is due again and how well you know it, your results by topic, points, hints, streak, badges, timed challenges won, game progress, your test date and study plan if you set them, and an unfinished session so you can resume it.
• How you answer: for each question you miss, which option you chose, how long it took, the kind of session, and the reason you give (content gap, misread, timing, trap), so the Mistakes page can bring it back; and a six-week log of how many questions you answered each day and how long they took, for your plan.
• Exams and CARS passages: for each full-length exam, timed section or CARS set you sit: your answer to each question, whether it was right, how long you spent, which questions you flagged, and any highlights or strike-throughs you made on the passage, so you can review the attempt and so your score estimate can be worked out.
• Plan and billing: your plan, its status and end date, and IDs that link your account to Stripe. Stripe collects your name, card, billing address and payment history; we don’t receive your card details.
• Referral, discount and invite codes: if you joined through a referral or invite link or used a code, which code, and when; and, for an invite, which account invited you and when you finished your first quest. The person who shared a referral code sees only totals, never who you are. The person who invited you sees the first name on your account and the day you joined. If you own a referral code, we keep your name and email address to run it.
• Studying with other learners (only if you take part): a handle you choose, whether your profile is public, your league, points and tier, duels you send or play, your squad and its weekly totals, Grand Rounds attempts (your answers, score and time), season badges, and the looks you unlock for your cell. If you verify a school, we send a one-time code to your school address, use the address once to confirm the school, and keep only the school’s domain and your choice to show it.
• Reminders (only if you turn one on): the push subscription your browser creates, which reminder you chose and your time zone, so the reminder arrives at the right local time.
• Night Shift: the look and optional badge name you choose for your doctor stay on your device, never on our servers; which passages you have healed is read from your CARS attempts.
• Messages you send us: contact form messages (your email address, topic and message), and bug reports. A bug report includes your message and technical details: the page you were on, your browser and screen size, recent errors, your session position, a few counts from your progress and your test date.

Automatically

• Request logs: our host records each request (IP address, browser, the page and time) to run and protect the service.
• Abuse prevention: we count requests for short periods by IP address and, for sign-in attempts, by a coded form of your email address. To stop the free question bank being copied, we also count new questions per network per day under a keyed hash of the IP address and date, never the address itself.
• Visit counts (only when switched on): Plausible counts page views and a few events (a session started, a sign-up, a checkout started or completed, an import, a plan made or saved, a mistake tagged and the reason, an invite copied, a reminder turned on, a recap shared, a duel sent or played, a squad joined, a profile made public, a round played, a campus verified, a cell look chosen, the tour started or finished) without cookies. Our server passes Plausible your IP address and browser type so it can count unique visitors; Plausible doesn’t store the IP address. This is off at the time of writing.
• Error reports (only when switched on): if the app crashes, Sentry receives the error, the page without its query string, and your browser and operating system. No account ID, IP address, cookies or form contents.

What we don’t collect

No advertising or social media trackers, no tracking pixels in our emails, no session recording, no precise location, no phone number and no date of birth. We don’t send marketing email.

Where it comes from

From you, from how you use the app, and from Google or Stripe if you use them.

Most data comes from you directly (what you type and how you study). Our servers create the technical records. Google sends us your profile if you sign in with it, and Stripe tells us when a payment succeeds, fails, is refunded or is disputed.

Signing in with Google

Google shares your email address, name and profile picture with us. We use the email to sign you in and the name to greet you.

When you choose “Continue with Google”, Google asks your permission to share your basic profile with ATP Quest: your email address and whether Google has verified it, your name, a link to your profile picture, and a Google account ID. Our sign-in provider, Supabase, stores these with your account.

We use your email address to identify your account and to email you, and your Google account ID to sign you in. Your name becomes your display name, which you can change on the Account page. We don’t use or show your profile picture. We don’t receive your Google password, contacts, files or anything else in your Google account, and we use Google data only to provide ATP Quest, never for advertising.

You can remove ATP Quest’s access at any time in your Google Account under Security → Third-party apps and services. Then set a password with a reset link to keep signing in.

How we use it

To run the service you asked for, keep it safe, get paid, and meet the law.

• To provide ATP Quest (necessary for our contract with you): your account, syncing and scheduling your progress, exams and their score estimates, the Mistakes page, the free plan’s allowance, paid plans, invite days and discount codes.
• To run the features you choose to take part in (the contract, and your choice): public profiles, leagues, duels, squads, campus standings, Grand Rounds and reminders.
• To keep it secure and working (our legitimate interest in a safe, working service): rate limits, preventing abuse and copying of the question bank, checking that competition results were earned fairly, fixing bugs, and counting visits.
• To run the referral, invite and affiliate programs (our legitimate interest, and the contract when you claim a discount or invite days): applying the discount or days and crediting the code.
• To meet legal obligations: payment and tax records, and records of what you agreed to.

We don’t make decisions about you by automated means that have legal or similarly significant effects. The scheduler only decides when to show you a question again, and the fair-play checks only decide whether a competition result counts.

Emails we send

Only emails about your account: confirming your address, sign-in links, password resets, a welcome message, a confirmation when you buy a plan, notices about your plan (cancelled, ended, or a 3-Month Pass ending in a few days), a one-time code if you verify a school, replies to messages you send us, and notices about changes to our terms. Stripe sends receipts and payment notices separately. No marketing.

What other learners can see

Nothing, unless you make your profile public. Then a handle you choose, your cell and tier, and what you earned, never your name.

Your account is private by default and appears on no board. If you make your profile public, other learners who share a league, duel or squad with you, or who look at a Grand Rounds board, can see: the handle you chose, your cell and its look, your league tier, your points this week and whether you studied today or yesterday, your season badges and title, and your squad if you leave that on. Campus standings show a school only as its email domain, with how many learners it has; you are counted on it only if you choose to show your campus. A duel link shows the challenger’s handle, cell and run to anyone who opens it, including people without an account.

Your name, email address, test date, scores, answers and study details are never shown to anyone. You can make your profile private again at any time, which removes you from boards straight away.

Who processes it

A small set of service providers that run parts of ATP Quest for us. We don’t sell your data.

These providers process data on our behalf under contracts that limit what they may do with it:

Email you send to our @atpquest.com addresses, and messages from the contact form, arrive in our own mailbox at our mail provider. We don’t sell personal data and don’t share it for targeted advertising. We disclose data to authorities only when the law requires it. If ATP Quest is ever sold or transferred, your data would go to the new owner under this policy, and we would tell you first.

Cookies and browser storage

Only storage the app needs or that remembers your choices. No advertising or tracking cookies, so no cookie banner.

This is every cookie, browser-storage item and browser registration ATP Quest uses. All are first-party: set by atpquest.com and read only by it. Stripe and Google set their own cookies on their own sites when you pay or sign in with them.

The referral cookie (atpq_ref) is set only when you open a referral or invite link, so that the discount or invite days you followed the link for are applied. To remove any of these, sign out, use Delete your data, or clear this site’s data in your browser settings.

How long we keep it

Only as long as it is needed. Old records are deleted automatically every day.

Security

Encrypted connections, per-account access rules, hashed passwords.

Data travels encrypted (HTTPS). Every database table holding your data enforces row-level security, so an account can only ever read its own records, and the boards other learners see are built by our servers from what you chose to make public. Passwords are hashed by our sign-in provider and never visible to us. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

Your rights and how to use them

With an account, download, correct or delete your data on the Account page. As a guest, your progress lives in your browser and you erase it in Settings. Or email us.

Studying as a guest (no account): your progress is stored only in this browser, not on our servers. Settings → Delete your data → Erase all progress deletes everything this site keeps in your browser; clearing your browser’s site data does the same. The steps below are for accounts.

• Download: Account → Your data → Download my data gives you your account, progress, plan, exam and CARS attempts, misses log, and the competition records that are yours (your profile settings, league places, duel runs, round attempts and badges) as a JSON file.
• Correct: change your name and email address on the Account page, and your handle and what you show in the app.
• Delete: Account → Delete account deletes your account and everything above immediately, after cancelling any subscription. A few records stay for a while: Stripe’s customer and payment records, bug reports and contact messages until their 90 days are up, referral and invite totals without your account link, and provider logs (see How long we keep it). Progress saved in a browser stays there until you sign out or clear it.
• Everything else: to see the records the download doesn’t include (sign-in details, bug reports, messages, referral and invite records, the questions you were served, squads and duels you created), to object to or restrict processing, or for any other request, email privacy@atpquest.com from your account’s address.

We reply within 30 days (45 days where a US state law allows that). We may ask you to confirm the request from your account’s email address. Someone you authorise may ask on your behalf; we will check the authorisation with you. If we turn down a request, you can appeal by replying to our answer, and we will review it within 45 days. You can also complain to a data protection authority or your state attorney general. Using your rights never changes the price or service you get.

US state privacy rights

We don’t sell or share your data or use it for targeted ads, so there is nothing to opt out of. Everyone gets the rights above.

Several US states, including California, give residents rights to know, access, correct, delete and port their data, and to opt out of its sale, sharing for targeted advertising, or profiling. We give these rights to everyone, wherever they live, using the steps in Your rights.

In the last 12 months we have collected the categories described in What we collect: identifiers (email address, account and device IDs, IP address), commercial information (your plan and purchases), internet activity (how you use ATP Quest), education information you give us (your test date, study plan and practice results), and inferences about your study (when a question is due, a score estimate). We use them only for the purposes in How we use it and disclose them only to the providers in Who processes it, and to other learners only as you choose. We don’t collect sensitive personal information as defined by those laws.

Global Privacy Control and Do Not Track

Because we don’t sell or share personal data or use it for targeted advertising, a Global Privacy Control or Do Not Track signal from your browser doesn’t change anything we do: there is nothing to switch off. If that ever changes, we will treat a Global Privacy Control signal as a request to opt out.

International users

ATP Quest is run from the United States, so your data is processed there.

Our providers process data in the United States and other countries. If you use ATP Quest from the European Union, the United Kingdom or Switzerland, your data is transferred under the Standard Contractual Clauses (with the UK Addendum) in our providers’ data processing agreements, or under the EU–US Data Privacy Framework where a provider is certified. You have the rights described in Your rights, including the right to complain to your local data protection authority.

Children

ATP Quest is for people 18 and older.

ATP Quest is not directed to children, and you must be 18 or older to use it (see the Terms). We don’t knowingly collect personal data from anyone under 18. If you believe someone under 18, and especially a child under 13, has given us personal data, email privacy@atpquest.com and we will delete it.

Changes to this policy

We tell you before a significant change takes effect.

When we change this policy, we update the date at the top and summarise what changed in Changes in this version. For significant changes we email account holders and show a notice in the app before the change takes effect. We won’t use data we already hold in a materially different way without telling you first and, where the law requires it, asking for your consent.

Changes in this version

This policy was updated on October 27, 2026 to describe everything ATP Quest collects today. It applies to existing accounts from November 26, 2026, or sooner if you accept it in the app.

• Exams and CARS passages: we now say that your answers, timing, flags and passage highlights on an exam or CARS set are saved to your account. The app has done this since full-length exams launched in October; the October 2, 2026 version left it out.
• How you answer: the Mistakes page keeps which option you chose, how long it took and the reason you gave; your plan keeps a six-week log of answers per day. The previous version said timing wasn’t collected.
• New sections for studying with other learners (What other learners can see), invite links, reminders, Night Shift and school verification. Each is off unless you take part.
• The storage table now says what the progress and preferences items actually hold, and lists the service worker and push subscription used for reminders.
• The emails list adds the purchase confirmation and the school-verification code; the visit-counts list names every event; the error-report line no longer claims an account ID is sent, because it isn’t.
• “Delete your data” now clears everything this site keeps in your browser, not only your progress, and the policy says so.
• Retention rows for duels, campus codes, competition records and reminder subscriptions.

Contact

How to reach us about privacy.

Griffin Blue, 124 Langdon St, Madison, WI, USA. Email privacy@atpquest.com, or use the contact form.