Privacy Policy
Last updated: October 26, 2026
1. Overview
FE for Raccoons ("the Platform," "we," "us," or "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. We are committed to being transparent about our data practices.
2. Data We Collect
When you use the Platform, we collect the following information:
- Account information: Your email address and a securely hashed version of your password (we never store your actual password)
- Study progress: Which problems you've attempted, your answers, mastery levels, and spaced repetition schedules
- Session data: When you study, how many problems you complete per session, and XP earned
- Diagnostic results: Scores and responses from practice diagnostic exams
- Account metadata: Account creation date, email verification status
- Profile details you choose to give us: Your first and last name and your exam date, all optional. Section 3 explains where your name appears. You can leave these blank or change them at any time on the Profile page.
- School and graduation year: We ask once which school you study at, or studied at, and when you graduate. You can skip the question. We use it to show students from the same school how many of them are studying, and to understand which programs use the Platform.
- Phone app activity: If you use the phone app while signed in, the rounds you answer there are saved to your account, so your progress is the same on the phone and on the website.
- How you found us: The referring website and any campaign tag in the link you arrived on, plus your answer to the one-time "how did you hear about us" question at registration. We use this only to know which channels are worth our effort.
- Purchase records: If you buy the Exam Simulation, we store the amount, the date, the price tier and the Stripe identifiers for the transaction.
3. What Other Students See
Studying for the FE is easier when you can see that others are doing it too, so some of your activity is visible to other signed-in students:
- Leaderboards: Your weekly and all-time XP and your place on the boards.
- The Daily: Your score and time on the daily puzzle, and, once enough students from your school have played, your place on your school's board.
- Right now: A feed on the dashboard showing what students did in the last day, such as the lesson or chapter they studied, whether it was on the phone or at a desk, how long ago, and whether they finished the Daily or the month's chapter challenge.
- Your school: When at least five students from the same school have studied in a week, students from that school see how many. They never see who.
These show your first name and the first letter of your last name, for example "Maria G." If you have not entered a first name, the feed shows you as "A student" and the leaderboards and the Daily show only the first three characters of your email address followed by asterisks. We never show your full email address, your answers, your mastery or your exam date to other students. Answers you give in the Exam Simulation never appear anywhere.
4. The Phone App
- Without an account: You can use the app as a guest. Your progress then stays on your phone only and is not sent to us. Deleting the app deletes it. If you later create an account or sign in, the rounds you answered as a guest are added to your account.
- With an account: The app signs in to the same account as the website, and what you do in it is saved and deleted the same way.
- Reminders: Study reminders and exam countdown reminders are scheduled by the app on your phone, at most three a day, and only if you allow notifications. We do not use a push notification service and do not collect a device token. You can turn them off in the app or in your phone's settings.
- What the app does not use: Your location, contacts, camera, microphone, photos, or any advertising identifier. The app contains no advertising or tracking code.
5. Payments
Payments are processed by Stripe. Your card number never reaches our servers and we cannot see it. To take a payment, Stripe collects the billing details it needs, which include your name and billing address, and holds them under its own privacy policy. We receive only the transaction record described above.
6. Analytics
We use Plausible Analytics on our public pages to count visits. Plausible is cookie-free, does not track people across other websites, and does not build a profile of you. It records aggregate page views, referrers and country, not individuals.
7. Data We Do Not Collect
We want to be clear about what we do not do:
- We do not use tracking pixels, ad cookies, or any advertising network. Our only analytics is Plausible, described above, which sets no cookies and cannot follow you off our site
- We do not sell, rent, or share your personal data with third parties for marketing
- We never see or store your card number. Stripe handles payments
- We do not ask for your phone number or your location, and the phone app does not read them
- We do not track your browsing activity outside of the Platform
8. How We Use Your Data
The data we collect is used exclusively to operate the Platform:
- Authentication: Your email and hashed password let you log in securely
- Progress tracking: We save your study progress so you can pick up where you left off
- Gamification: XP, days studied, badges, and mastery levels are calculated from your session and problem history
- Spaced repetition: Your problem history determines which problems are scheduled for review
- Email we send you: Password reset and email verification messages, a welcome note, a weekly progress digest, exam-countdown reminders if you have entered an exam date, and an occasional nudge if you have been away. Every non-essential email carries a one-click unsubscribe link, and unsubscribing never affects your account
9. Cookies
We use a single cookie for authentication. This cookie is:
- HttpOnly: It cannot be accessed by JavaScript (protection against XSS attacks)
- Secure: It is only sent over HTTPS connections
- SameSite strict: It is not sent with cross-site requests (protection against CSRF attacks)
- Session duration: It expires after 7 days of inactivity
We do not use advertising cookies, analytics cookies, or any third-party cookies.
10. Third-Party Services
We use the following third-party services to operate the Platform:
- MongoDB Atlas: Cloud database hosted on AWS (US East region) for storing your account and study data. MongoDB Privacy Policy
- Resend: Transactional email service used to send password reset and email verification messages. Resend Privacy Policy
- Amazon Web Services (AWS): Cloud hosting for the Platform servers. AWS Privacy Policy
- Stripe: Payment processing for the Exam Simulation. Stripe collects and holds the card and billing details; we never see your card number. Stripe Privacy Policy
- Plausible Analytics: Cookie-free visitor counts on our public pages, with no cross-site tracking and no personal profiles. Plausible Privacy Policy
These services process your data solely to provide their respective functions. We do not share your data with any other third parties.
11. Data Security
We take reasonable measures to protect your data:
- Passwords are hashed with bcrypt (industry-standard one-way hashing)
- All connections use HTTPS encryption
- Authentication tokens are stored as HttpOnly secure cookies
- Password reset tokens are SHA-256 hashed before storage
- Database access is restricted to authenticated application connections
No system is perfectly secure. While we strive to protect your data, we cannot guarantee absolute security.
12. Data Retention and Deletion
We retain your data for as long as your account is active. You can delete your account at any time from the Profile page on the website or from the Profile tab in the phone app. When you delete your account, all your data is permanently removed from our systems, including:
- Your account and credentials
- All study progress and mastery data
- Session history and XP records
- Diagnostic exam results
- Badge and days-studied data
- Phone app activity, Daily results, and your name and school
This deletion is immediate and irreversible. Afterwards we keep only an anonymous count that an account was deleted, with no email, name or anything else that points back to you. Stripe keeps its own record of any payment, as payment law requires. An account that is never verified is deleted automatically after 30 days.
13. Children's Privacy
The Platform is designed for adults preparing for the FE professional engineering exam. We do not knowingly collect data from children under 13. If you believe a child has created an account, please contact us and we will delete it promptly.
14. Your Rights
You have the right to:
- Access your data: Your study progress and account information are visible on the Dashboard and Profile pages
- Delete your data: You can permanently delete your account and all associated data from the Profile page on the website or in the app
- Choose how you appear: You can change or remove your name and school on the Profile page at any time
- Change your credentials: You can update your password from the Profile page
If you have additional data requests, contact us at fe4raccoons@oqupa.com.
15. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the Platform after changes constitutes acceptance of the revised policy.
16. Contact
If you have questions about this Privacy Policy or your data, you can reach us at fe4raccoons@oqupa.com.