Privacy and cookies

When you create an account we keep your name, email address, and the grade and target score you enter — the last two only because the progress page compares your results against the score you are aiming at. If you upload a profile picture, we keep that too.

As you work we record which questions you answered, what you chose, whether it was right, and when, along with your Practice Test results. This is the product: a review queue, a streak and a progress chart are all read back out of those records. Nothing here is shared with other students — the community section shows only what you deliberately post to it.

Feedback you send, and any screenshots you attach to it, are kept so we can read and answer it. Your name and email are attached to feedback so a reply is possible.

Your optional personal exam date and target score are saved with your account. Private Vocabulary banks store their names, words, definitions and examples. Community records include posts, comments, reactions, saves, follows and reports. Test sittings retain deadlines, saved answers and completed result snapshots. Staff tools keep moderation decisions, support replies and delivery status, question revisions, generation requests and AI usage records.

Tutor requests keep an account-owned request identity and a fingerprint of the input so a retry does not start another paid response. Completed tutor responses are temporarily saved for recovery. On a later tutor request, saved responses older than seven days are cleared; request identities remain to prevent duplicate processing. Unsaved tutor questions can also stay in this tab’s retry storage, which is cleared on logout or account switch.

If you are invited to the Community beta, we keep at most one Community presence record per UTC day when Community successfully opens. It says only which account entered and the date. It does not store page-by-page history, searches, post text, IP addresses, device fingerprints, or session tokens. Staff see cohort counts rather than a student-level activity trail.

Separately, first-party product reporting records account-associated page and action events and study activity. The daily Community presence record is not the whole activity dataset.

One kind of cookie, and it is the one that keeps you signed in. It is set by Supabase, the service that handles our accounts, and is named sb-<project>-auth-token.

It holds your session — the proof that you are you — and lives for up to 400 days, refreshed each time you visit. Signing out deletes it immediately. A long session may be split into numbered cookie chunks, but they serve the same purpose. These are first-party cookies: they are sent to 1Elevate and to nobody else, and cannot be used to follow you to another site.

This is why there is no accept-or-decline banner. Consent is required for cookies that track you or that you could reasonably refuse; it is not required for the one that makes signing in work, and offering a “decline” button whose only honest consequence is “then you cannot use the site” would be a fake choice. If we ever add tracking analytics or another company's optional scripts, that changes, and you will be asked before they load. The first-party daily Community count described above uses the existing sign-in session and adds no tracking cookie.

Separately, your browser keeps a few preferences in its own local storage: your theme, your daily practice goal, whether the sidebar is collapsed, and cached recent history. Display and practice preferences stay on that browser; your SAT target and personal exam date are saved to your account. Cached content may remain readable when disconnected, but authentication, loading uncached questions, answer checking, confirmed saves and AI require a connection. Vocabulary rounds and unsaved drafts may be local to a browser tab. Clearing browser data removes those local copies; it does not delete server records.

Supabase. Account authentication, database records and stored files, including profile images and private support attachments.

Vercel. On Vercel deployments, application hosting and server operation logs. Hosting infrastructure can process connection information when serving requests.

Google (Gemini API). When AI features are used, question and passage text, answer context and recent tutor messages; staff generation requests send their question requirements. Names, email addresses and overall test scores are not deliberately included by the tutor, but text you type may contain personal information.

Resend. When support email delivery is configured, the recipient email address, greeting name, a quoted excerpt of the support message and the staff reply. Account confirmation and password-reset email are handled through Supabase Auth and its configured mail service.

Desmos calculator. Opening the graphing calculator loads an external calculator integration. Its provider can receive connection information and content entered into its calculator. A local basic calculator is offered when it cannot load.

1Elevate activity and administration. First-party reporting stores account-associated activity events, study sessions and daily Community presence. Operational records cover support delivery, moderation, editorial revisions, generation requests and AI usage. These support the product and staff reporting; they are not an advertising feed.

Settings has a study export button. Its JSON file contains selected account details, up to 20,000 most recent saved answers, up to 500 completed test results, and this browser's preferences. The file includes its scope and limits. It excludes question bodies, unfinished sittings, Vocabulary, Community, support attachments and administrative records; it is not a complete account archive.

You can permanently delete your account and its history yourself from Account. The action asks for confirmation and cannot be undone. If you cannot sign in, contact us through Account access and support.

1Elevate is built for students preparing for the SAT, which in practice means mostly people aged 14 and over. We ask for no more than the account details above, and we direct no advertising at anyone.