● Privacy How your data is handled

Plain-English privacy.

No ads. No tracking cookies. No data sales. Here's what that actually means, section by section.

Last updated: April 2026

The short version

Your progress is yours

Play as a guest and your data never leaves your browser. Sign in and the only things we keep are your email and your progress JSON — encrypted in transit, never shared, deletable on request. No behavioral profiling, no advertising, no dark patterns.

If you want the detail, every category below is written to be checkable rather than reassuring.

What we collect, and don't

Category by category

Guest mode

If you play without signing in, your progress — XP, streaks, answered questions, spaced-repetition schedule — is stored only in your browser via localStorage. Nothing is sent to our servers. Clear your browser data and your progress is gone with it — sign in to preserve it across devices.

Accounts (when you sign in)

Authentication runs on Supabase. If you sign in we keep exactly two things:

  • Your email address, for login.
  • Your progress JSON — XP, streaks, SRS schedule, per-case scores.

We do not share or sell this data. Ever. Delete your account and everything attached to it any time by emailing info@biostatquest.com.

Analytics (opt-in only)

If you accept analytics on the cookie banner, we create a per-browser visitor_id (UUID, no PII on its own) and log lightweight activity events — page loads, case starts, answer correct/wrong — to our Supabase database. Used only to understand which cases are working. No advertising, no third-party trackers, no cross-site profiling. We also use Vercel Web Analytics, which is cookieless. See the Cookies page for the full inventory.

Cookies & local storage

Essential storage only by default: your Supabase session, your saved progress, and your consent choice itself. No advertising cookies, no third-party trackers. Opt-in analytics (the visitor_id and landing-variant tag) are off until you accept them on the consent banner. Change your mind any time from the or via the Cookies page.

Children

BioStat Quest is intended for adult learners (16+). We do not knowingly collect data from children under 13.

Changes

We'll update this page if anything material changes and note the date above. Substantive updates will also surface a one-time notice on next sign-in.

Questions, or want your data deleted?

Email info@biostatquest.com. Real person, real reply, usually within a few days.