hvacsim.com · official copy

Privacy policy

Last updated August 2026. Short version: practice as a guest and we keep nothing about you. Clock in, and we keep exactly what a tech file needs — your email and your training record — and you can wipe your file yourself, any time.

Working as a guest

No account is required. As a guest, which calls you have closed is saved in your own browser (localStorage) so progress survives a refresh. That data never leaves your device and is not tied to any identity. Clearing your browser data clears it.

If you create a tech file (account)

Registration is optional and happens by signing in with Google, GitHub, or an emailed link. When you do, we store:

Your email address, and the display name and profile picture your sign-in provider shares.
Which provider you signed in with. We never see or store a password.
Your training record: closed calls, scores, guided-session logs, and account events such as role changes and account deletion.
If you subscribe: your plan, its status and renewal date, and the Stripe identifiers that link your tech file to Stripe’s records. Payments are processed by Stripe, which handles your card — card numbers never touch our servers.

We use this to sign you in and to keep your scores on your record across devices. Nothing else.

Cookies

Signing in uses a session cookie that keeps you signed in, plus short-lived cookies that only exist to keep the sign-in handshake safe. There are no advertising or cross-site tracking cookies.

What we never do

No sale of personal information, and no sharing with anyone beyond the service providers that run the site (listed below).
No advertising, ad profiles, or cross-site tracking.
No card numbers on our servers — subscription payments are handled by Stripe.

Deleting your account

Dashboard → DELETE MY TECH FILE removes your account on the spot: you are signed out, your email, name, picture and anything you typed into live session notes are erased from our live records (short-lived database backups expire on their own within days), and your remaining training entries are unlinked from any identity. Deleting your account also sets any active subscription to cancel at the end of its paid period. If that automatic step ever fails on the payment processor’s side, contact us and we will end it manually. Or email us and we will do it for you.

Where data lives

Account data is stored with our database provider (Neon), the site is hosted on Vercel, sign-in emails are delivered by Resend, which processes your address to send them, and subscription payments are processed by Stripe, which handles your payment details under its own privacy policy. Like nearly all hosts, they process standard request data such as IP address and browser user-agent to deliver the site and protect it from abuse. We see aggregate traffic, not a profile of you.

Fonts

Typefaces are loaded from Google Fonts, which receives the request as part of serving the font files.

Your rights

The basics we hold are shown on your own dashboard. For access, correction, export, or deletion beyond the in-app tools, email coreyrcards@gmail.com and we will handle it within 30 days.

Children's privacy

This is a professional training tool intended for adults. We do not knowingly collect information from children.

Contact

coreyrcards@gmail.com