Privacy
Bluebear SAT is run by Bluebear Prep. This page says what we collect, why, who else touches it, and what you can make us do about it. It is written to be read rather than survived.
Last updated 17 September 2026
What we collect
- Your account
- Your name, email address, username, and a one-way hash of your password. If you sign in with Google we receive your name, email address and Google account ID instead — we ask Google for nothing else, and we never see your Google password.
- What you agreed to
- When you create an account we record that you ticked the required box (age, these terms and this policy), and whether you chose to get emails about new tests, study tips and offers, with the time of each.
- What you set yourself
- Your target scores, the test date you are working towards, and the currency you would rather see prices in.
- Your practice
- Every answer you give, how long each question took you, which ones you flagged, your scores, and the notes you keep in the error log and vocabulary list. This is the substance of the product — the analytics you are shown are worked out from it.
- Your purchases
- What you bought, when, for how much, and the PayPal order ID. We never see or store your card number, your bank details or your PayPal password — those go to PayPal and stop there.
- Usage
- Which pages you visit and roughly where in the world you are, through the services listed below. We do not build advertising profiles of individual students.
Why we are allowed to
Your account and your practice data exist because you asked us for a service we cannot provide without them. Your purchase records exist because we have a contract with you, and because tax law requires us to keep them.
Analytics and advertising measurement are the one part that is not necessary to run your account. We use them to work out which pages do their job. You can stop them by blocking third-party scripts in your browser, and the site will still work.
We do not sell your data, and we do not share your practice results with anyone outside the services listed below.
Who else handles it
| Service | What it does |
|---|---|
| Supabase | Holds the database, and any figures uploaded with a question. |
| Vercel | Hosts and serves the site. |
| PayPal | Takes payment. Card details go to PayPal, never to us. |
| Resend | Sends verification codes and receipts to your email address, and — only if you chose them — emails about new tests, study tips and offers. |
| Analytics and Tag Manager, Google Ads, and — if you use it — Google sign-in. | |
| An advertising pixel that measures whether our Reddit ads work. |
These companies are based in the United States and elsewhere, so your data leaves your country when you use the site. Each is bound by its own contract with us to handle it only on our instructions.
Cookies
We set seven, and every one of them is there to make the site work rather than to follow you around. The services above set their own separately.
| sat_token | Keeps you signed in. Without it the site cannot tell who you are. |
| sat_anon | Lets you sit a practice test before you have an account, and hands that attempt to your account when you make one. |
| sat_currency | Remembers whether you want prices in dollars or won. |
| sat_target_score | Remembers the target you set before signing up. |
| sat_test_dates | Remembers which sitting you are working towards. |
| sat_unlock | Records that a section of an exam has been unlocked for you. |
| sat_sync_log | A short technical log, used to recover an interrupted exam. |
Students under 14
Most people preparing for the SAT are teenagers, and this page is written for them rather than for their lawyers.
If you are under 14, ask a parent or guardian before you make an account. If you are a parent and would rather your child did not have one, email us and we will delete it and everything attached to it.
Keeping it safe
The site is served over HTTPS, and the database sits behind access controls. A password you chose yourself is stored as a bcrypt hash, which means we cannot read it.
One honest exception: when an administrator creates an account for you — a class roster, say — we keep the initial password we set, so that we can tell you what it is. Change it once you are in and it stops being recoverable by anyone.
We keep your account and your practice history for as long as your account exists. Tell us to delete it and we will.
What you can make us do
- See what we hold
- Most of it is already in front of you while signed in — your results, your answers, your notes and your purchases. Email us for anything else.
- Correct it
- Your name and your targets are editable in Settings. Email us to change an email address.
- Stop marketing emails
- Turn them off in Settings, use the unsubscribe link in any of them, or email us. Verification codes and receipts still arrive, because the account needs them.
- Delete your account
- Email us and we will delete your account and your practice history. Records of a payment are kept for as long as tax and accounting law requires, because we are not permitted to delete those on request.
- Take it with you
- Ask, and we will send you your results and answers in a machine-readable file.
- Object, or complain
- Email us first. If you are in Korea you may also complain to the Personal Information Protection Commission; in the UK or EU, to your national data protection authority.
Asking us anything
Write to johnny@bluebearprep.com. A person reads it. If we change this page in a way that matters, we will say so here and move the date at the top.
SAT® is a registered trademark of the College Board.