Privacy, without the fine-print fog.

1. Who this policy covers

This Privacy Policy applies to LSAT BEAST at lsatbeast.com and the related training, account, leaderboard, and support experiences. “LSAT BEAST,” “we,” and “us” refer to the operator of this service.

2. Information we collect

• Account information: email address, Beast username, sign-in provider, account identifiers, and profile or avatar information.
• Training information: points, answers, streaks, decks cleared, level and question position, active training time, rank history, goals, unlocks, and other progress needed to operate your account.
• Guest information: while you train without an account, progress and a guest identifier are stored in your browser. If you choose to bank that progress, a short-lived transfer record may be created so it can be securely attached to the account you authenticate.
• Transaction information: product, amount, payment method selection, order or claim identifiers, status, and entitlement history. Stripe processes payments on its secure checkout page. We store order references and access status, not full card numbers. Test mode is clearly labeled and does not charge real money.
• Technical and support information: browser or device information, IP address, service logs, security events, and anything you send when asking for support.

3. Google sign-in data

If you continue with Google, we request only the basic information needed to sign you in: your Google account identifier, email address, name, and profile image when Google makes them available. We use this information to authenticate you, create or find your Beast ID, and keep your training progress connected to the correct account.

LSAT BEAST does not request access to Gmail, Google Drive, contacts, calendars, or other Google content. We do not sell Google user data, use it for advertising, or allow humans to read it except when needed for security, support, legal compliance, or with your permission.

4. How we use information

• Provide passwordless and social sign-in, account creation, and identity linking.
• Save, synchronize, merge, and restore guest and account training progress across devices.
• Calculate scores, streaks, Beast Rating, deck completion, rank, and leaderboard placement.
• Provide purchased or earned access, prevent duplicate claims, and maintain transaction records.
• Secure, debug, improve, and support LSAT BEAST; enforce our Terms; and comply with law.

5. Product analytics

We use first-party product analytics to understand how LSAT BEAST is used and improve training. These records may include page or training starts, account creation, guest-progress banking, and aggregate usage totals. We also record training question identifiers, question types, answer correctness, and response times to identify difficult material. Signed-in records are linked to your Beast ID; guest records use a temporary training-session identifier. Access is limited to authorized internal administrators.

When unique-visit tracking is enabled, a first-party cookie with a random browser identifier helps us count visits to each page. It expires after 30 days of inactivity. We store a hashed identifier with the page, visit date, and approximate network location, such as city, state or region, county, country, and postal code where available, without attaching your name, email, or IP address to these visit records. Different browsers and cleared cookies may be counted separately. We honor browser Do Not Track and Global Privacy Control signals for this tracking. Records older than 30 days are removed during routine cleanup.

Visit records can also include the referring website and campaign source, medium, and name from tagged links. We use this to understand whether visitors find us through search, social media, partners, or other channels. We retain the referring hostname, not its full URL, path, or search terms. A short-lived record in your browser tab keeps the arrival source during internal navigation and expires after 30 minutes without tracked activity. These records follow the same tracking controls and retention period as unique visits.

Our hosting provider supplies approximate location information based on the network connection. For U.S. county lookup, rounded approximate coordinates may be sent to the U.S. Census Bureau mapping service, without your IP address, browser identifier, or account details. We do not request GPS access or retain coordinates in visit records. Network locations may be incomplete or inaccurate, especially with VPNs and mobile networks.

We do not use third-party advertising pixels, cross-site tracking, fingerprinting, or session replay. Product analytics are not used to sell or share personal information for behavioral advertising.

6. When we share information

We share information only as needed with service providers that help us operate authentication, databases, email delivery, hosting, security, and support. This includes Supabase for account authentication and related infrastructure, and Google when you choose Google sign-in. Providers process information under their own terms and our instructions, as applicable.

We may also disclose information when required by law, to protect users or the service, or as part of a merger, financing, acquisition, reorganization, or sale of assets with appropriate safeguards.

7. Public leaderboard

Your Beast username, avatar, score, rating, rank, decks cleared, and streak may be visible to other users on the leaderboard. Your email address is not displayed there. Choose a username that does not reveal information you want to keep private.

8. Storage, security, and retention

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online system is completely secure. We retain account and training information while your account is active and as reasonably needed to operate the service, resolve disputes, prevent abuse, and meet legal obligations. Guest transfer records expire or are removed after they are no longer needed.

9. Your choices and deletion

You can train in guest mode, choose your sign-in method, edit your Beast username, reset training history, or delete your account from the Beast Profile. Account deletion removes the account and associated application records from active systems. Limited security logs or backup copies may remain temporarily where required for service integrity or legal compliance.

You may also email chat@lsatbeast.com to ask about access, correction, or deletion. We may need to verify your identity before completing a request.

10. Children

LSAT BEAST is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can review and delete it as appropriate.

11. Changes and contact

We may update this policy as the service changes. We will post the revised policy here and update its effective date. Material changes may also be communicated in the product or by email when appropriate.

Privacy questions: chat@lsatbeast.com