1. Who we are
StreetPrimer.com operates streetprimer.com, an independent SIE practice simulator. We are the controller of the personal information described here. Our address is 30 N Gould St Ste R, Sheridan, WY 82801, and you can reach us at [email protected]. This policy is written in plain English and covers the whole site.
2. What we collect
- Account information: your email address, your name if you choose to give one, and a hashed password (or, if you sign in with Google, the account identifier Google returns). We never see or store your password in readable form.
- Exam attempts and scores: the answers you select, the items you have seen, your raw score, your per-section breakdown, time spent, and when each attempt started and finished.
- Purchase records: if you buy, Stripe processes the payment and returns to us the amount, currency, product bought, payment status, and Stripe customer and payment identifiers. We never see or store full card numbers.
- Device and analytics data: pages viewed, referring URL, and coarse device and browser information, used to keep the app working and to understand aggregate usage.
- Cookies and local storage: first-party storage that keeps you signed in and holds an anonymous visitor identifier, so an attempt started before sign-up can be attached to your account.
We do not collect health data, we do not ask for a government identifier, and we have no access to your FINRA account or your official exam results.
3. Why we use it
- To run the service — build your forms, score attempts, and show your history and diagnostics.
- To take payments, grant the access you bought, and honor refunds.
- To send transactional email — receipts, password resets, and result summaries.
- To send optional study and product email, which you can stop at any time.
- To keep the service secure, prevent abuse, and check that a sign-up address is deliverable.
- Analytics — aggregate usage measurement so we can improve the simulator.
4. Legal bases and consent
Where data protection law requires a legal basis, we rely on: performance of our contract with you (running the service, taking payment, transactional email); our legitimate interests (security, abuse prevention, aggregate analytics); your consent (optional marketing email, which you may withdraw at any time); and our legal obligations (tax and accounting records). Withdrawing consent never affects the access you have bought.
5. Processors we use
- Stripe — payment processing. Receives your email and your payment details directly, and acts as an independent controller for fraud prevention and its own legal obligations.
- Brevo — sending transactional and optional product email. Receives your email address, your name if given, and your purchase tier.
- Lovable and Supabase — hosting, application delivery, account authentication, database, and server functions. Hold your account and practice data.
- ZeroBounce — one-time validation that a sign-up email address is deliverable. Receives the email address only.
Each processor is bound by a written agreement and may only act on our instructions. We disclose personal information otherwise only where the law requires it, or to a successor if the business is transferred.
6. How long we keep it
- Account and practice data: for as long as your account exists.
- Payment and refund records: seven years from the transaction, because tax and accounting law requires it. These survive account deletion.
- Email sending logs: 24 months.
- Anonymous visitor identifier: 12 months from your last visit.
7. Security
Traffic is encrypted in transit, passwords are stored only as hashes, database access is restricted per user by row-level security policies, and card data never reaches our systems. No system is perfectly secure; if a breach affects your data and the law requires notification, we will tell you.
8. Your rights
You may ask us to give you a copy of your data, correct it, export it, restrict or object to processing, or delete it. To do any of these, email [email protected] from your account address. We confirm within 5 business days and act within 30 days. Deletion is permanent — purchased access is lost and is not refundable on that basis alone; we keep only the payment records named in section 6.
You can opt out of marketing email at any time using the unsubscribe link in any such email, or by emailing us. Transactional messages about your account and purchases are not marketing and continue.
California residents. Under the CCPA/CPRA you have the right to know, access, correct, delete, and port your personal information, to limit use of sensitive personal information, and to opt out of its sale or sharing — and to be free from retaliation for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, we run no advertising and no cross-context behavioral targeting, and we disclosed no personal information for those purposes in the past 12 months. You may use an authorized agent; we verify requests against the email address on the account.
Do Not Track. Browsers send Do Not Track signals in different and inconsistent ways, and there is no accepted standard for responding to them, so we do not respond to them. We do not track you across other companies' sites in any case.
9. Children
The service is for adults aged 18 or over, mirroring the age rule for sitting the exam. We do not knowingly collect personal information from anyone under 18. If you believe a minor has registered, email us and we will remove the account.
10. International transfers
The service is hosted in the United States and is intended for users in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, where privacy laws may differ from those where you live. Where a transfer out of the EEA or UK occurs, we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum where applicable.
11. Changes
If we change this policy we update the effective and last-updated dates above. If a change is material, we notify registered users by email before it takes effect.
12. Contact
StreetPrimer.com, 30 N Gould St Ste R, Sheridan, WY 82801. Email [email protected].