DecipherU
Sign inStart practicing

California privacy notice

Bespoke Intermedia LLC. Effective September 1, 2026. Covers the last twelve months.

This is the notice at collection for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act. It says what the what we keep page says, in the categories the law uses.

Categories collected

Identifiers: email, name and sign-in identifiers if you create an account; a random anonymous id and session id in a cookie if you do not. Internet activity: the practice events, that is which answer you chose on each question, whether it was right, how long it took, and whether you changed your mind before submitting; how sure you said you were (sure, think so, guess); when you open the source document shown after a question; when you flag a question and the note you type; when a practice session starts and ends; the exam date you set; the exam outcome you report (passed or not, the score band if you give it, which domains felt weak, which attempt it was); your answers to the follow-up questions we send about 90 and 180 days after the exam; profile answers you give voluntarily (prior experience, current and target role, hours per week, country, exam language, materials used, how you heard about us); the channel that brought you here (search, a link, direct) and the type of device you use (phone, tablet, desktop). Inferences: a readiness reading by exam domain computed from your answers. Geolocation: the country you tell us, and coarse region from your IP address for security logs. We do not collect sensitive personal information as the law defines it.

Purposes

Showing you your own readiness, choosing the next question, sending emails you asked for, learning which practice predicts passing, publishing aggregate findings, and keeping the site secure. Data is kept as long as the what we keep page says.

Sale and sharing

We do not sell personal information and we have not sold any in the past twelve months. Marketing pixels from Meta and LinkedIn load only if you accept marketing cookies in the banner; if you do, that may count as sharing for cross-context behavioral advertising, and rejecting the banner or using the Do not sell or share my personal information link stops it. We honour Global Privacy Control signals from your browser as an opt-out.

Service providers and contractors

  • Vercel: Hosting, edge compute, and page-level traffic analytics. United States. Required to run the site. Privacy policy.
  • Supabase: Postgres database hosting. United States (eu-central available on request). Required to run the site. Privacy policy.
  • Clerk: Authentication and identity. United States. Required to run the site. Privacy policy.
  • Stripe: Payment processing. United States with EU sub-processing. Required to run the site. Privacy policy.
  • Resend: Transactional email delivery. United States. Required to run the site. Privacy policy.
  • Anthropic: AI inference for scenario explanations and coaching. United States. Required to run the site. Privacy policy.
  • Sentry: Error monitoring. United States. Required to run the site. Privacy policy.
  • PostHog: Product analytics. United States with EU hosting available. Only with analytics consent. Privacy policy.
  • Microsoft Clarity: Session replay and heatmaps. United States. Only with analytics consent. Privacy policy.
  • Google Analytics: Web analytics. United States. Only with analytics consent. Privacy policy.
  • Meta (Facebook): Advertising pixel and Conversions API. United States. Only with marketing consent. Privacy policy.
  • LinkedIn: Advertising insight tag. United States. Only with marketing consent. Privacy policy.

Your rights

You can ask what we have collected about you and get a copy, ask us to correct it, ask us to delete it, opt out of sale or sharing, limit use of sensitive personal information (we collect none), and you will not be treated differently for using these rights. Send a request at /data-request or to privacy@decipheru.com. We confirm receipt within 10 business days and answer within 45 days, extendable once by 45 days with notice. To verify a request we match the email address on the account; an authorised agent must show written permission. To stop the practice recording itself, use /privacy/opt-out.

Under 18

The site is for adults and we do not knowingly collect personal information from anyone under 18, so we have no minors to sell or share data about.

Contact

privacy@decipheru.com, or Bespoke Intermedia LLC, Florida, United States. Request metrics for the previous year are available on request.