Privacy Policy

Overview

PlutusLearning ("PlutusLearning," "we," "us," or "our") is a financial education website operated as a sole proprietorship in New York, United States, and available at plutuslearning.com. This policy explains the information we collect, why we use it, when service providers receive it, and the choices available to you.

You may use much of the educational website without an account. Accounts are optional and are available only to people age 13 or older. During sign-up, we temporarily use the birth month and year you enter to determine whether your age category is under 13, 13 through 17, or 18 and older. We do not retain the birth month or year.

Information We Collect

• Account details: your first name, email address, account identifier, and password in protected hashed form when you create an email account.
• Google sign-in details: if you choose Google, we receive the basic profile information needed to create and identify your account, such as your name, email address, Google account identifier, and profile image if provided.
• Learning progress: XP, rank, flashcard activity, Review Later terms, quiz progress and recent question history, course and lesson completion, answers and written exercise responses, mission results, achievements, daily activity, and related learning preferences.
• Quiz allowance: For signed-in accounts, we store an account-linked quiz count, the start of the allowance window, and attempt identifiers to apply the free allowance consistently across devices and avoid counting the same start twice. Signed-out usage is kept separately in your browser.
• Subscription and refund details: Stripe customer and subscription identifiers, Premium status, billing status, transaction-related records, and refund requests you submit. PlutusLearning does not receive or store your full card number.
• Communications: messages and information you choose to send when you contact us.
• Technical information: IP address, browser and device information, requested pages, timestamps, security events, and server logs needed to deliver and protect the service.
• Age and consent records: the resulting age category, age-check time, policy versions, and time associated with guardian-permission, terms, privacy, and subscription confirmations. We do not retain the birth month or year used for the age check.

How We Use Information

• create, secure, and support your account;
• save and synchronize learning progress across devices;
• provide free and Premium features;
• process subscriptions, confirm payment status, and prevent fraud;
• send account verification, password reset, service, and subscription messages;
• respond to support, privacy, and account requests;
• maintain, troubleshoot, and protect PlutusLearning; and
• comply with legal, tax, accounting, and security obligations.

We do not sell personal information. As of the effective date, we do not use behavioral advertising or third-party advertising trackers.

Cookies and Browser Storage

PlutusLearning uses secure session cookies to keep signed-in users authenticated. We also use a short-lived, secure age-check cookie during account creation. It contains only a signed age category and timestamps, not the birth month or year. An under-13 result temporarily prevents another account attempt in that browser. Cloudflare may also use necessary security cookies when it checks traffic for abuse. These cookies are necessary to provide and protect the service. We use browser local storage to remember learning activity and preferences on a device. When you are signed in, eligible learning progress is sent to our server so it can follow your account across devices.

Course progress and exercise responses are saved in browser storage and may be included in account progress synchronization. Recent quiz history and saved vocabulary also help provide review and avoid repeated questions. Vocabulary review links can include term identifiers in the page address; these identifiers may appear in browser history and request logs. Avoid entering sensitive personal or financial information in learning exercises. Signing out does not necessarily erase browser-stored learning work, and eligible work already on a shared browser may sync to the account that signs in next. Use a separate browser profile on shared devices, or clear this site's stored data before another person uses it. Clearing browser data does not delete account records held on our server; contact us to request account-data deletion.

We do not currently use optional advertising or analytics cookies. If we add non-essential tracking in the future, we will update this policy and provide consent controls where required.

Service Providers

We share information only as needed to operate the service, complete a request, protect users, or comply with law. Our main providers include:

• DigitalOcean for website, server, and database hosting;
• Cloudflare for domain, network, and security services where enabled;
• Google when you choose Google sign-in;
• Stripe for subscription checkout, billing, payment processing, and fraud prevention; and
• Resend for account verification, password reset, and other service emails.

These providers process information under their own terms and privacy notices as well as their agreements with us.

Children and Teen Users

Account creation and Premium subscriptions are not available to children under 13. Before collecting account details, the sign-up page asks for birth month and year in a neutral age check. The server immediately converts those entries into an age category and does not retain the original entries. If you are between 13 and 17, you must have permission from a parent or legal guardian before creating an account or purchasing Premium.

For known users under 18, we use personal information only as needed to provide, maintain, secure, and support the requested service, meet legal obligations, or for another purpose to which the user has separately consented. Learning-progress processing is limited to what a reasonable user would expect when asking us to save XP, completed activities, Review Later terms, and related progress across devices. We do not knowingly sell a minor's personal information, use it for behavioral advertising, or build unrelated profiles about teen users.

If we learn that an account belongs to a child under 13, we will disable the account and delete the child's personal information unless retaining limited information is legally required. A parent or guardian may contact us about a child's information.

Retention and Security

Account details and synchronized learning progress are kept while the account is active. After a verified deletion request, we aim to remove active account and learning records within 30 days, except information that must be retained for security, fraud prevention, disputes, or legal obligations. Payment and transaction records may be kept for up to seven years for tax, accounting, chargeback, and legal purposes. Consent records and administrator audit records may be kept for up to seven years to document authorization, security, and compliance. Routine server and security logs are kept only as long as reasonably needed for operations and security, normally no longer than 90 days unless an incident or legal obligation requires longer retention. Backup copies may remain until the relevant backup is safely overwritten.

We use reasonable administrative, technical, and physical safeguards appropriate to the information we maintain. Current controls include HTTPS, secure account cookies in production, hashed passwords, email verification, request limits, restricted database access, server-side Premium checks, limited and audited administrator access, and established service providers for hosting and payments. We review access and security controls as the service changes. No online service can guarantee perfect security.

If a security incident affects information protected by applicable breach-notification law, we will investigate and provide required notices to affected people and government authorities without unreasonable delay.

Your Choices

• Review and update your first name or password from your Profile page.
• Cancel Premium through the online membership controls in your Profile.
• Clear local learning information through your browser settings.
• Request access, correction, or deletion of account information by contacting us.
• Stop using Google sign-in and revoke PlutusLearning's access through your Google account settings.

To make a privacy request, email [email protected] from the address connected to your account and describe whether you are requesting access, correction, deletion, or another privacy action. A parent or legal guardian may contact us about a minor's account. We will explain our decision and how to ask us to reconsider if we cannot fulfill a request.

We may need to verify that a request concerns your account. Some information may be retained when required for fraud prevention, transaction records, legal compliance, or resolving disputes.

United States Service

PlutusLearning is operated from the United States, and information is processed in the United States. The paid service is currently intended for United States customers.

Changes and Contact

We may update this policy as the service changes. We will update the date above and provide additional notice when a change is material.

For privacy questions or requests, visit our Contact page or email [email protected].