Privacy

Study information stays on your browser

Lesson completion, practice answers, exam results, previously viewed item IDs, exam date and weekly study time are stored in your browser. An active exam can also be saved there. We do not synchronize study records to a learner account. Backups are files you control, and imports are processed on your device.

Email verification

We accept only @student.umgc.edu, @faculty.umgc.edu, and @umgc.edu addresses for full access. When enabled, our email provider Resend receives your address to deliver the access link. We do not request your university password or access your university account. Verification establishes control of the mailbox, not an enrollment or employment status.

The access database stores a hashed random token, the eligible domain, expiration and redemption timestamps. Browser grants also use hashed random tokens. Rate-limit keys are hashed; raw email addresses and link tokens are not included in operational logs. This free-access flow does not use Stripe or collect payment details.

Links expire after 15 minutes and work once. Browser grants last up to 30 days. Expired link, grant and rate-limit records are eligible for removal after one additional day through maintenance. Email-provider and hosting records follow their own retention policies.

Site operation

The site uses essential access cookies and browser storage. Hosting, email and font providers may receive technical request information when their services are used. Fonts load from Google Fonts, and the original Grok integration remains. Operational logs contain an operation, outcome, random request ID and timestamp. Study answers are not used in advertising.

Your choices

Save a study backup before removing browser data. You may use the public sample without verifying an email. For access or privacy questions, contact the support address to be published when email access opens. ThreatCanvas is independently operated and is not affiliated with or endorsed by UMGC.