Privacy Policy

Last updated 2026-10-26

Series 3 Prep is built and operated by Lahman Holdings ("we," "us"). This page explains, in plain language, what information we collect and what we do with it.

The short version

• We collect the minimum needed to run the service: your email/password, your drill answers and progress, and billing information if you subscribe.
• We do not sell, rent, or share your data with advertisers.
• We never see or store your card number - Stripe handles that directly.

Who can use this

Series 3 Prep is a study tool for adults preparing for the NFA Series 3 exam. It is not directed at children, and we don't knowingly collect data from anyone under 18.

What we collect

Your email address, a securely hashed password (we never store the plain password), your drill progress (which questions you've answered and how you did on them), and billing information if you subscribe - billing details (card number, etc.) go directly to Stripe; we never see or store your card number.

Automated practice adjustment

The drill tracks which topics you're weaker on using simple, deterministic logic (accuracy per topic) - not a generative AI model or chatbot, and it never generates free-form content; it only selects which existing bank questions to show you.

Who we share data with

We don't sell or rent data to anyone, ever. A short, complete list of who processes data on our behalf, and why:

• Cloudflare - hosts the site and database (infrastructure only), and runs a cookieless, privacy-first web analytics beacon on every page (aggregate page-view counts only - no personal data, no cross-site tracking).
• Stripe - processes payments, if and when you subscribe (we send them your email and the amount charged; they handle your card details directly, we never receive or store them).
• Resend - sends the account emails we send you (password resets, receipts, payment/renewal notices). We send them your email address and the content of that one email.
• Google Ads - we run ad campaigns and use Google's conversion-tracking script to measure whether an ad led to a signup. Google may set cookies and receive the fact that a conversion happened; we don't send them your email or any account data.

That's the complete list.

Your choices

• Delete your account: from your Account page - this permanently deletes your login, your drill progress, and cancels any active subscription. If you have an active subscription, cancel it first (or contact us) so billing doesn't continue after deletion.
• For anything else, contact [email protected].

Data retention and security

We keep data for as long as your account is active, plus a short period after deletion for backups to fully clear. Passwords are salted and hashed, never stored in plain text. Data is stored in Cloudflare's database and session infrastructure.

Changes to this policy

If we make a material change, we'll update the date at the top of this page.