Privacy Policy

This Privacy Policy describes how Patent Bar Fidelity LLC ("the Platform," "we," or "us") collects, uses, and handles information from individuals who access or use patentbarfidelity.com (the "Site"). By using the Site, you agree to the practices described herein.

This Policy applies solely to information collected through the Site and does not govern information collected offline or through any third-party services not operated by the Platform.

1. Information We Collect

We collect two categories of information: information you provide voluntarily, and information collected automatically through your use of the Site.

Information You Provide — Email Gate (Legacy). When requesting access to certain content, you may submit your email address. Submission is voluntary. This path remains available and is stored locally in your browser.

Information You Provide — Account Sign-In. The Site offers optional sign-in via Google OAuth 2.0 ("Sign in with Google"). If you choose to sign in, Google provides us with your email address, display name, and a unique Google account identifier. We do not receive your Google password. Sign-in is entirely optional; the email gate remains available as an alternative.

Account Data Stored Server-Side. When you are signed in, the following data is stored on our servers linked to your account:

• Your email address and a platform-assigned user identifier, created when your account is first established
• Exam session state — your answer selections, marked questions, and notes for each practice or exam session
• Per-question results — your answer choices and whether they were correct, used to generate your gap map and session history

This data is stored under row-level security: only you can read or write your own records. We do not access individual user records except as required to resolve technical issues you report.

Information Collected Automatically. When you visit the Site, certain technical information is collected automatically, including:

• Pages visited and navigation paths within the Site
• Referring URLs and general traffic sources
• Device type, browser type, and operating system
• Country-level geographic information
• Session duration and page interaction data

This information is collected in aggregate and is not linked to any individual user identity. We do not collect precise geolocation data, and we do not use cookies or persistent tracking identifiers for behavioral advertising purposes.

Browser Local Storage. The Site stores the following items in your browser's local storage:

• A session token upon email submission (legacy path), used solely to recognize returning visitors on the same device and browser
• A signed-in session token when you authenticate via Google, containing your platform user ID and email address, used to maintain your session and enable access to account features without repeated sign-in
• Exam and practice session state, persisted locally for continuity between visits on the same device

None of these items transmit data to external parties. You can clear local storage at any time through your browser settings.

2. How We Use Information

We use the information collected for the following purposes:

• To authenticate your identity and maintain your session when you sign in
• To grant access to gated content and features on the Site
• To store and sync your exam state, session results, and progress across devices when you are signed in
• To generate your personal gap map — an aggregation of your per-question results by MPEP chapter — displayed only to you
• To communicate material updates to the Platform, including new content, features, or access changes
• To analyze aggregate usage patterns for the purpose of improving the Site's content and functionality
• To maintain the security and operational integrity of the Site

We do not use your email address or account data for promotional marketing campaigns, affiliate marketing, or any form of commercial solicitation unrelated to the Platform's core function as an examination preparation resource.

3. Analytics

The Site uses Cloudflare Web Analytics to understand aggregate traffic and usage patterns. Cloudflare Web Analytics is designed to be privacy-preserving: it does not use cookies, does not fingerprint individual users, and does not track users across websites. Data collected through Cloudflare Web Analytics is subject to Cloudflare's Privacy Policy.

We do not use Google Analytics, Meta Pixel, or any other third-party behavioral tracking or advertising technology on the Site.

4. Disclosure of Information

We do not sell, rent, license, or otherwise transfer your personal information to third parties for their independent use or commercial benefit.

We may disclose information only in the following limited circumstances:

• To service providers who assist in operating the Site, including database, authentication, and hosting infrastructure providers, solely to the extent necessary to perform those services and subject to confidentiality obligations
• When required by applicable law, regulation, legal process, or enforceable governmental request
• When necessary to protect the rights, property, or safety of the Platform or its users

Our current infrastructure includes the following third-party service providers:

• Supabase — database and authentication services. Your account record, exam state, and question results are stored in Supabase-hosted infrastructure. Supabase's privacy policy is available at supabase.com/privacy.
• Google — identity provider for optional OAuth sign-in. When you choose "Sign in with Google," your browser communicates with Google's authentication servers. This interaction is subject to Google's Privacy Policy.
• Cloudflare — hosting, edge delivery, and privacy-preserving analytics. Subject to Cloudflare's Privacy Policy.

5. Data Retention

Email addresses collected through the legacy gate are retained for so long as the Platform is operational or until you request deletion, whichever occurs first.

Account data — including your user record, exam state, and question results — is retained for so long as your account remains active or until you request deletion. Deletion requests result in permanent removal of your user record and all associated data from our servers.

Aggregate analytics data is retained in accordance with Cloudflare's standard data retention practices.

We do not retain data beyond what is reasonably necessary for the purposes described in this Policy.

6. Your Rights and Choices

Email deletion. You may request deletion of your email address from our records at any time by contacting us using the information in Section 9.

Account deletion. You may request deletion of your account and all associated server-side data at any time by contacting us at the address in Section 9. We will process deletion requests promptly and without requiring justification. Deletion is permanent and cannot be undone.

Sign-out. Signing out of your account removes your session token from your browser's local storage. Your server-side data (exam state, question results) is retained and available when you sign back in. To remove server-side data entirely, submit a deletion request as described above.

Local storage. You may clear your browser's local storage at any time to remove session tokens and locally cached exam state stored on your device. Doing so will not affect data held on our servers.

The Site is intended for users in the United States. We do not knowingly direct the Site toward residents of the European Union, the United Kingdom, or other jurisdictions with distinct data protection frameworks. If you access the Site from outside the United States, you do so at your own initiative and are responsible for compliance with applicable local laws.

7. Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that information has been submitted by a person under 18, we will take prompt steps to delete such information.

8. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Material changes will be reflected in a revised Last Revised date at the top of this page. Your continued use of the Site following any such modification constitutes acceptance of the revised Policy. We encourage you to review this page periodically.

9. Contact

Questions, requests, or concerns regarding this Privacy Policy or our data practices — including requests to delete your email address or account — may be directed to: