Privacy Policy

Last updated: April 1, 2026

Overview

CRAM ARCADE ("we," "us," or "the app") is a free NMLS SAFE exam prep tool available at cramarcade.com. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

Data stored in your browser (localStorage)

Your study progress — scores, XP, streaks, spaced repetition schedules, and settings — is stored locally in your browser by default. This data never leaves your device unless you create an account and opt into cloud sync.

Account data (optional)

If you create an account via Clerk (our authentication provider), we collect:

Account creation is optional. You can use the full app without an account.

Cloud-synced data (optional)

If you sign in, your game progress is synced to our database (hosted on Supabase) so you can access it across devices. This includes scores, category stats, spaced repetition data, and study time — no personal information beyond your email and display name.

Leaderboard data

If you submit a score to the leaderboard, your display name and score are visible to other users.

Third-Party Services

Google AdSense

We use Google AdSense to display ads. Google may use cookies and tracking technologies to serve personalized ads based on your browsing activity. You can opt out of personalized ads at Google Ad Settings. See Google's Privacy Policy for details.

Clerk (Authentication)

Account authentication is handled by Clerk. When you sign in, Clerk processes your email and authentication data under their privacy policy. See Clerk's Privacy Policy.

Supabase (Database)

Cloud-synced progress data is stored on Supabase. See Supabase's Privacy Policy.

Cookies

CRAM ARCADE itself does not set cookies. However, third-party services (Google AdSense, Clerk) may set cookies for advertising and authentication purposes.

Data Retention

Local data persists in your browser until you clear it. Cloud-synced data is retained as long as your account exists. You can delete your account and all associated cloud data by contacting us.

Children's Privacy

CRAM ARCADE is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.

Your Rights

You can:

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy? Email us at [email protected].