What we collect
- Your account: your name, your email address, and a one-way hash of your password. We never store the password itself.
- Your progress: which lessons you have opened and finished, where you stopped in each one, and how much time you spent.
- Your quizzes and exams: the answers you submitted, the score, and whether you passed.
- Your certificates of completion: the course, the date you finished, and the name printed on the certificate.
- Your purchase: what you bought and the Stripe reference for it. Card details go straight to Stripe and never reach us.
- Security records: for every sign-in, registration and password-reset attempt we record the email address that was used, whether it succeeded, and the IP address the request came from. That includes attempts made by visitors who have no account here, because an attacker working through a list of passwords does not have one either. Refusing to record those attempts is refusing to stop them. We also keep a row per active session so you can be signed out everywhere.
Cookies and analytics
The session cookie is strictly necessary: it keeps you logged in after you sign in, carries a random session id and nothing about you, and is removed when you log out. If you arrive through a partner's referral link, a second cookie (__Host-ref) remembers which partner sent you for 30 days, so the partner is credited if you buy; it holds the partner's short name and the date, nothing about you. There is no advertising cookie on this site.
If you choose Accept in our cookie banner, we use Google Analytics 4, a web analytics service from Google LLC, to understand how visitors find and use this site. It records the pages you view, how you arrived (for example from a search or a link), your device and browser type, your approximate location (derived from your IP address), and actions such as creating an account, starting checkout (the course and its price), completing a purchase (our order reference, the amount you paid and its currency, and the course, never your details) and tapping our email address. Google Analytics 4 does not log or store IP addresses. We turned off Google signals and ad personalization, we do not use Google Analytics for advertising, and we never send Google your name, email address, phone number or anything you type into a form. Pages opened from an emailed sign-in, verification or reset link, and pages that show a certificate, are never measured.
When you accept, Google Analytics sets two cookies on this site, _ga and _ga_5HSW2SMTY6, which tell one browser from another and last up to 2 years. If you choose Decline, Google Analytics does not load and sets no cookies. If your browser sends a Global Privacy Control signal, we treat it as a decline: Google Analytics does not load and the banner does not ask. It stays that way unless you turn analytics on yourself in Cookie settings, or have already accepted in this browser. We store your choice in your browser's local storage (wns-analytics-consent) so we do not ask on every page. You can change it any time with Cookie settings at the bottom of every page; withdrawing deletes the Google Analytics cookies. Google explains how it uses this data at policies.google.com/technologies/partner-sites (opens in a new tab).
Why we hold it
To give you the course you paid for, to save your place in it, to grade your quizzes, to issue and verify your certificate of completion, to email you about your own account, to keep the accounts secure, and, only if you accept analytics cookies, to see how visitors use the site. That is the whole list.
Who else touches it
Five companies, each doing one job for us. We do not share your data with anyone else unless the law requires it.
- Stripe
- Takes the payment. Stripe receives your email and the item you bought, and holds your card details. We never see or store a card number.
- Resend
- Sends our email: the address confirmation, the password reset, the purchase receipt and the certificate link. Resend receives your email address and the message.
- Vercel
- Hosts and serves the site. Vercel processes the requests your browser makes, including your IP address, as part of running the site.
- Neon
- Runs the database, in the United States, where the records below are stored.
- Runs Google Analytics, and only if you accept analytics cookies: it receives the pages you view and the actions listed under Cookies and analytics, with your browser's details and an approximate location, never your name, your email address or anything you type.
How long we keep it
Account data (your name, your email and your login) is kept while your account is open, and until you ask us to close it.
Security records are the shortest-lived thing here. A failed sign-in counts toward the 15-minute rate-limiting window, and a cleanup job runs once a day and deletes every attempt older than 24 hours, IP address included. Nothing keeps them beyond that, and there is no separate log of them.
Google keeps analytics data for 14 months.
Completion records are kept for five years from the date you finished: the enrolment, the lesson progress and time, the quiz and exam attempts, and the certificate of completion with the name that was printed on it. They are proof that a course was taken and passed, so they have to outlive the account they came from and they survive a deletion request.
Request deletion
Email info@waynecountytrafficschool.com from the address on the account and ask us to delete it. We anonymize the account rather than erasing the row: your name and email address are replaced with placeholder values, your password is replaced with a random one, and every session and pending email link is destroyed, so the login stops working immediately and nothing in the account points back to you.
The completion records above stay for the rest of their five-year retention period, including the holder name already printed on an issued certificate of completion. Otherwise a certificate someone else relies on could no longer be verified. Tell us in the same email if you also want us to revoke your certificates, and we will.
Seeing or correcting your data
Your account page shows your name, your email and your progress, and you can change your name there. For a copy of everything we hold, or a correction we cannot make ourselves, email us and we will answer within 30 days.
Children
This site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Security and changes
Passwords are hashed, sessions are stored server-side, and the site is served over HTTPS only. No system is perfect; if a breach ever affects your data we will tell you. If this page changes, the date at the top changes with it. Questions go to info@waynecountytrafficschool.com, and the terms cover the rest of the agreement.