Privacy
What we collect, why we hold it, and what we never do. Last updated October 2026.
At purchase: your email address — collected by our payment provider at checkout — and a purchase record tying your payment to your certificate order. Card details never touch our systems.
When you start an exam: your full name and email address — the name is printed on your certificate, the email keys your AI-assistant budget and your order link — and for each attempt: start and submission times, your score and per-topic breakdown, the answers you selected, and whether time ran out.
On your device: one cookie, session_id — set only after you order a certificate, an access token that keeps that purchase’s exam access alive on that device for up to a year (it identifies your purchase, not you across sites) — plus your name and email in this tab’s session storage so a retake does not ask you to retype them.
No accounts or profiles, no advertising cookies, no analytics — ours or anyone else’s, no device fingerprinting, no location data. Beyond the single access cookie above, this site does not track you.
To run the exam and deliver the certificate you order, count your attempts, issue and verify certificates, prevent abuse, and process refunds. Nothing else.
Your records are stored in Cloudflare D1, a managed database on Cloudflare’s infrastructure. Payments are taken by our payment processor, Stripe; we receive only a payment confirmation and your email address — never your card number.
Your certificate is meant to be checkable: holder name, credential ID, issue date and exam version appear on a permanent public verification page. Anyone you show the certificate to can confirm it — that is the point of the registry.
Exactly two kinds of party: our payment processor (to take the $69 payment and return refunds) and Cloudflare (to host this site and store its database). Otherwise we disclose data only where the law requires it. We do not sell data, rent it, or share it for advertising.
One third-party resource does load: the IBM Plex typeface comes from Google Fonts, so your browser fetches those files from Google and Google sees your IP address with that request. Nothing else leaves this site.
Purchase and attempt records are kept while we need them to provide access, verification and refunds. Certificate registry entries are permanent — a verification link must keep working — unless the certificate is removed: by refund (see the refund policy) or by revocation under the terms.
Email us and we will send you a copy of what we hold, correct the name on your certificate, or delete your purchase and attempt records — and pull your certificate from the public registry if you ask. Every request is handled by a person; email is the only channel.
Email hello@meridian-institute.cloudcraft.workers.dev. See also the terms of service and the refund policy.