Privacy policy

Version of 19 October 2026. This is a translation of the French text, which prevails.

Who is responsible for your data

Antoine Routaboul, 3 boulevard Bernard Hirsch, 95000 Cergy, France, reachable at antoine@drillanddeal.com.

What we collect

If you create an account: your email address and your password, which Supabase stores encrypted and never in plain text, plus the dates of creation and last sign-in.
If you are signed in: your progress (lectures and modules finished, interview and flashcard practice, timed drill scores, Excel cases, best quiz score), saved with your account so you find it on your other devices.
If you subscribe: your plan, its renewal or end date, and the technical identifiers of your customer record and subscription at Stripe. You enter your card details on Stripe’s payment page: they never reach us.
When you visit the site: our host processes technical data, such as your IP address, browser and the pages requested, to serve the pages and protect the site.
On your device: the site keeps your preferences (theme, language), your progress (modules read, quiz results, cards reviewed) and, if you are signed in, your session in your browser’s local storage. Apart from your progress, which we also save with your account when you are signed in, this data stays on your device.

The site uses no advertising cookies, no audience measurement and no trackers.

Why, and on what legal basis

Providing your account, Premium access and the saving of your progress: performance of the contract.
Taking payment, sending receipts, applying VAT and handling disputes: performance of the contract and legal obligations. Link, which resells the subscription, is responsible for its own processing.
Protecting the site against abuse: our legitimate interest.
Sending account emails (confirmation, sign-in, password): performance of the contract. We send no newsletter without your consent.

Who receives your data

Supabase, Inc.: accounts, progress and Premium access, on servers located in Paris.
Stripe and Link (Sold through Link, LLC): payment, receipts, invoices and payment support. See Stripe’s privacy policy.
Cloudflare, Inc.: hosting and delivery of the site.
Resend: sending account emails.

We do not sell or rent your data.

Transfers outside the European Union

Several of these providers are based in the United States. Transfers rely on the Data Privacy Framework or on the European Commission’s standard contractual clauses.

How long we keep it

Account: while it is active. We delete it on request, or after three years without a sign-in.
Progress saved with the account: for as long as the account exists. It is deleted with the account, and you can clear it at any time from My account.
Subscription data: for the length of the subscription, then five years, the period in which a dispute can arise.
Host’s technical data: a few days to a few weeks, under Cloudflare’s rules.
Local storage: until you clear it from your browser.

Your rights

You can access your data, correct it, have it deleted, restrict its use, object to its processing, take a copy of it, and leave instructions for after your death. Write to antoine@drillanddeal.com. We reply within one month.

To delete your account, write to us from the account’s address: we delete the account, its progress and its Premium access. Payment data held by Link is deleted from your Link account or through Link’s support.

If you think your rights are not respected, you can complain to the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr.

Changes

We will update this page if our processing changes, and tell subscribers by email about any significant change.