Privacy Policy

Effective: August 5, 2026

This is the privacy policy for College Crash Course (collegecrashcourse, the site at thecollegecrashcourse.com, and any associated digital products). We try to keep this readable. If anything below is unclear, email connect.collegecrashcourse@gmail.com.

Who we are

College Crash Course is operated by Grayson Feury, Matthew Sopko, and Mark Daugherty, based in New Castle, Pennsylvania, United States. We are not currently registered as an LLC or other formal business entity. We sell digital products (a written guide and access to an SAT practice tool) directly to individual buyers.

What information we collect

We collect very little ourselves. Most data handling on our site happens through third-party services that have their own privacy practices.

• Payment information. When you buy the guide or a premium consultation, payment is processed by Stripe. We do not see or store your full payment card details. We receive only the information Stripe shares with us about the transaction (such as your name, email address, billing region, and the amount paid). See Stripe's privacy policy.
• Email address. We collect your email address in a few ways: when you buy a product, when you email us directly, and when you enter it to unlock the free sample chapter or otherwise sign up for updates. We use it to deliver what you purchased, send you the free chapter, respond to questions, schedule a call (premium tier), and send occasional emails about the product and college-admissions tips. You can opt out of the marketing emails at any time using the unsubscribe link or by replying "unsubscribe" — we'll still send essential emails about anything you actually purchased.
• Cookies and ad measurement. With your consent (via the cookie banner), we use the Meta (Facebook/Instagram) Pixel to measure whether our ads work — for example, which ad led to a purchase — so we don't waste money on ads that don't. If you decline, the Pixel does not load, and you can change your choice at any time. See Meta's privacy policy.
• Site analytics. We use Vercel Web Analytics to count how many people visit the site and which pages they read, so we know what's working and what to fix. It records the page you viewed, the site that referred you, any campaign tags in the link you clicked, your approximate location (country, region, and city), and your browser, operating system, and device type. It does not use cookies, does not store your IP address, and does not follow you to other websites — to count returning visitors it uses a scrambled identifier derived from the request itself, which is discarded after 24 hours. Because nothing is stored on your device and nothing identifies you personally, this runs on every visit and is not part of the cookie banner. See Vercel Web Analytics privacy documentation.
• Access codes. Buyers of the guide receive an access code that unlocks the guide, worksheets, and SAT practice tool. The code is tied to the email address used at purchase, and logging in requires both. You may add one additional email address — for example the student's, when a parent bought the guide — and either address will then work.
• Signed-in devices. Each access code can be signed in on up to five devices at once. To make that limit work, when you log in we record which devices are signed in on your code, along with the time, your IP address, and your browser's user-agent string. We use this only to enforce the device limit and to spot codes being shared more widely than a single household — not to build a profile of you, and never for advertising. When a sixth device signs in, the device that hasn't been used in the longest time is signed out. You can sign a device out yourself at any time from the member area, which deletes that device's record. Records for signed-out devices are removed within 90 days.
• Practice tool usage. The SAT practice tool runs in your browser and serves questions from our own site. Your answers and session progress are kept in your browser only and are not transmitted to us or to any third party. No AI provider is involved. The analytics described above counts a visit to the practice tool the same way it counts any other page, but it never sees your answers, your score, or which questions you worked on.
• Server logs. The site is hosted on Vercel, which may log standard request information (such as IP address and user agent) for security and operational purposes. See Vercel's privacy policy.

What we don't collect

• We do not run Google Analytics or any analytics product that builds a profile of you across sites. Our page counts come from Vercel Web Analytics, which is cookieless and anonymous (see "Site analytics" above).
• We do not set advertising or tracking cookies unless you accept them via the cookie banner (see "Cookies and ad measurement" above).
• We do not sell or rent your personal information to anyone.

How we use information

The information we have is used only to:

• Deliver the products you purchased (the guide, an access code, a scheduled consultation).
• Send you the free sample chapter and occasional emails about the product and college-admissions tips, which you can opt out of at any time.
• Measure and improve our advertising (only with your cookie consent).
• Understand which pages get read and which don't, so we can improve the site.
• Respond to questions or support requests.
• Comply with tax, accounting, and other legal obligations.
• Protect against fraud, abuse, or unauthorized access.

How we share information

We share information only with the third-party services we rely on to operate: Stripe (payments), Vercel (hosting and site analytics), Resend (email delivery), and — only if you consent to cookies — Meta (ad measurement). We share information with these providers only to the extent necessary to deliver the service. We do not sell personal information.

How long we keep information

We keep purchase records for as long as required by applicable tax and accounting law (typically several years). We keep email correspondence for as long as it is useful to support you, and longer if there is a dispute or legal obligation. Site analytics is kept by Vercel as aggregate counts for a limited rolling window and is not linked to your name, email, or account, so there is no individual record in it to look up. You can ask us to delete what we have on you (see "Your rights" below).

Your rights: California (CCPA/CPRA)

If you are a California resident, you have the right to (1) know what personal information we have about you, (2) request that we delete it, (3) correct inaccuracies, and (4) opt out of the "sale" or "sharing" of your personal information.

We do not sell personal information, and we have never received money for it. We do, however, want to be straight with you about one thing rather than hide behind a technicality: if you accept cookies, the Meta Pixel sends information about your visit to Meta so we can measure which ads lead to purchases. California law (the CPRA) treats that as "sharing" for cross-context behavioral advertising, even though no money changes hands and we get no data about you back. So we are telling you plainly that it happens.

How to opt out of the browser tracking: decline the cookie banner, or click here to reopen your cookie choice and select Decline. If you decline, the Meta Pixel does not load and nothing about your browsing is shared. We also honor the Global Privacy Control (GPC) signal: if your browser sends one, we treat it as a decline and never load the Pixel. Our site analytics is not affected by this choice because it is anonymous and is not shared with any advertiser.

One thing the cookie banner does not cover. When someone completes a purchase, our server sends Meta a single confirmation that a sale happened, so we can tell which ad campaign worked. It contains the purchase amount, the product name, and a one-way scrambled (hashed) version of your email address — not your actual email, and nothing about which pages you viewed. This is sent from our server for every purchase, so declining cookies in your browser does not stop it.

How to opt out of it. Email connect.collegecrashcourse@gmail.com and we will add your email address to a suppression list, after which no purchase event is ever sent for you. That is a change on our side and it takes effect immediately.

For anything already sent, the most direct control is yours, not ours. Meta's Accounts Center includes a setting for your activity off Meta technologies, where you can review what businesses have attributed to you and clear it. We would rather point you at a control you can use and verify yourself than promise you a deletion we cannot confirm on your behalf.

To exercise any of these rights, email connect.collegecrashcourse@gmail.com. We will not discriminate against you for exercising any of these rights.

Your rights: European Economic Area and United Kingdom (GDPR/UK GDPR)

If you are in the EEA or the United Kingdom, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Our lawful basis for processing is generally either (a) performance of the contract you entered when you purchased a product, or (b) our legitimate interests in operating and securing the site. To exercise any of these rights, email connect.collegecrashcourse@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

International data transfers

We are based in the United States, and our third-party providers (Stripe, Vercel, Resend, and — with consent — Meta) may process data in the United States or other countries. If you use the site from outside the United States, you understand that your information may be transferred to and processed in countries that have different data protection laws than your own.

Children's privacy

This site is intended for high-school students and their parents. It is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, email connect.collegecrashcourse@gmail.com and we will delete it.

Security

We use reasonable technical and organizational measures to protect information, but no system is perfectly secure. Payments are processed by Stripe over encrypted connections. The site is served over HTTPS. Email is as secure as standard email is, which is to say, you should not send sensitive information by email if you can avoid it.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Effective" date at the top. Material changes will be flagged on the home page or by email if we have your address.

Contact

Questions, requests, or complaints? Email connect.collegecrashcourse@gmail.com. We will do our best to respond within 30 days.