Privacy Policy

Last updated: November 5, 2026

opnF.sh ("we," "our," or "us") operates the opnf.sh website and platform. This policy explains what data we collect, why we collect it, and how we use it.

What We Collect

Account information. When you register, we collect your email address, username, and display name. If you register as a teacher, we also store your account type and organization details. If you sign in with Google, Google shares your name, email address and profile picture with us; we use them only to create and identify your account.

Payment information. Payments are processed by Stripe. We never see, store, or have access to your full credit card number. Stripe provides us with a customer ID, transaction records, and subscription status. For Stripe's privacy practices, see stripe.com/privacy.

Learning progress. We store which tutorials, quizzes, labs, and exams you complete, your scores, error counts, and timestamps. This data powers your dashboard, streak tracking, and course progress.

CertPrep+ activity. When you practice on CertPrep+ while signed in, we store your answers, how sure you said you were, section progress, and practice exam attempts and results. We use this to grade your answers, unlock sections, and build your score report and study plan. If you practice without an account, your quiz session is kept for up to 3 hours to grade it and then deleted within 2 days; nothing is saved to a profile.

Organization data. If you create or join an organization, we store the organization name, invite code, member list, course assignments, study programs, notes from its admin, and seat usage. The organization's admin can see the progress, quiz and practice exam scores, and activity of students in their organization, and can leave them notes. If you are removed from an organization for missing study days, we keep your email address on that organization's list so the invite code can't be used to rejoin until its admin lets you back in.

Technical data. We collect IP addresses for security purposes (brute force protection, rate limiting, and spotting automated copying of practice questions). We use Cloudflare for CDN and security, which may set cookies and process requests according to Cloudflare's privacy policy.

What We Don't Collect

We do not collect your real name (unless you choose it as your display name), phone number, physical address, social media accounts, or any demographic information. We do not track you across other websites. We do not sell, rent, or share your personal data with third parties for marketing purposes.

How We Use Your Data

We use your data to provide and maintain your account and course access, track your learning progress, process payments and manage subscriptions, send transactional emails (verification, welcome, purchase confirmation, password reset), detect and prevent abuse, and allow teachers to monitor student progress within their organization.

Emails

Besides account emails, we occasionally send registered users emails about new features and offers. Every one of these includes an unsubscribe link, and unsubscribing never stops account emails such as password resets or receipts. Emails are delivered by Mailgun. For product and offer emails, Mailgun records whether an email was opened and which links were clicked, using a small image and redirected links; we use this only to see how our emails perform.

Cookies

We use only first-party and essential cookies and browser storage: a WordPress session cookie to keep you logged in, Cloudflare security cookies, a short-lived cookie that holds a CertPrep+ practice session when you practice without an account, and a cookie and browser storage entry that remember you closed the offer bar so it stays hidden. CertPrep+ also keeps unsent answers in your browser briefly so a dropped connection doesn't lose them. We do not use advertising cookies, analytics trackers, or third-party marketing pixels on the website.

Data Retention

Your account data and progress are retained as long as your account exists. If you delete your account, your personal data is removed within 30 days. Anonymized, aggregated data may be retained indefinitely.

Your Rights

You can access your data by viewing your dashboard and settings, update your email, display name, and password from your account settings, delete your account by contacting us at the email below, and export your progress data by contacting us.

Children

opnF.sh is designed for users aged 13 and older. If you are under 13, do not create an account. School organizations using opnF.sh are responsible for ensuring compliance with applicable laws regarding student data, including COPPA and FERPA.

Changes

We may update this policy. If we make material changes, we'll notify registered users by email or a notice on the site. Continued use after changes constitutes acceptance.

Contact

Questions about this policy: [email protected]