What MeritCue actually stores

If you create an account, MeritCue stores:

• Account email and a password hash (not the password itself)
• Whether you are on the student or parent path
• Grade year you choose: sophomore or junior (for copy and the October countdown)
• Practice and diagnostic progress: item attempts, word reviews, streak, minutes studied, daily free-tier counts
• Payment status for Pro (Free, Monthly, or Season pack), plus Stripe customer / subscription IDs when you check out

Guest sessions stay in this browser (localStorage). Guests do not get a US database row until they create an account. Creating an account from a guest session claims that on-device progress.

• No school, district, or classroom rostering — no class codes, no gradebooks
• No student last name, student ID, or photo
• No College Board login, Bluebook data, or scraping of College Board sites
• No prior-PSAT score upload in this version
• No card numbers (PANs), CVC, or full payment credentials — Stripe handles those

Durable account and progress data is stored in Postgres hosted in the United States, region AWS US East (N. Virginia) / us-east-1 (Neon or Vercel Postgres). Vercel serves the app over HTTPS. Stripe processes payments on Stripe’s infrastructure. We do not choose an EU or other non-US region for the MeritCue database.

Email identifies your account so you can sign back in and keep Pro entitlement. Grade year only changes on-product copy. Progress drives practice, the parent digest, and daily free limits. Payment status unlocks Pro. We do not sell this data, and we do not run classroom admin tools.

Season pack is a one-time Stripe Checkout payment. Monthly is a Stripe subscription. Checkout runs in Stripe’s hosted page. MeritCue’s webhook (and a post-checkout confirm) mark Pro on your US database row. We log event types and IDs for debugging — never full card data.

Signed-in users can delete their own MeritCue account and progress in-app at /account. That removes the US database row (progress cascades) and signs you out. Guests can clear this device the same way, or by signing out and clearing site data.

If you cannot sign in, email support@meritcue.com from the account address and ask us to delete it. Stripe may keep records they are required to retain; we cannot delete Stripe’s copies of a payment.

The product is for high-school students (typically sophomores and juniors) and their parents. It is not directed at children under 13.