CertKata

Privacy Policy

Last updated: August 29, 2026

CertKata is operated by Dragan Mandic, an individual based in the Republic of Serbia.

1. What We Collect

  • Account data: your email address and password (stored and hashed by Supabase Auth; CertKata does not see your plaintext password).
  • Practice data: your answers, scores, and session history for questions you attempt, used to compute your per-domain readiness.
  • Payment data: if you make a purchase, payment details are collected and processed entirely by Paddle.com Market Limited, our merchant of record. CertKata does not receive or store your card details — we receive confirmation of purchase and license status only.
  • Basic technical data: standard request logs collected by our hosting provider.

We do not use third-party analytics or advertising trackers.

2. How We Use It

  • To authenticate you and maintain your account.
  • To calculate and display your practice scores and per-domain readiness.
  • To grant and manage access to content you've purchased.
  • To email you about your account, a purchase, or (if you opted in) product updates.

3. Third-Party Processors

Your data is processed by:

  • Supabase (authentication, database, and storage).
  • Vercel (hosting).
  • Paddle.com Market Limited (payment processing, billing, and tax compliance, as our merchant of record) — see Paddle's own privacy policy for how they handle payment data on our behalf.

4. Data Retention

Your account and practice data are retained as long as your account is active.

5. Your Rights — Current Limitations

Self-service account deletion and data export are not yet built into the product. If you'd like your data deleted or exported, contact support@certkata.com and we'll handle it manually.

6. Cookies

We use only the session/authentication cookies necessary for you to stay logged in. No third-party advertising or tracking cookies are used. Paddle's checkout may set its own cookies during payment — see Paddle's privacy policy.

7. Children's Privacy

CertKata is not directed at children under 13 (or 16, where applicable by local law), and we do not knowingly collect data from them.

8. Changes to This Policy

This policy may be updated as the product develops. Material changes will be communicated via the email associated with your account.

9. Contact

Questions about this policy: support@certkata.com