Skip to content
LEGAL · PRIVACY POLICY

Privacy Policy

Last updated: April 26, 2026

This privacy policy explains what data CivicsPath collects, why we collect it, who we share it with, and how you can control or delete it. We try to keep this short and honest. If something here is unclear, email us at hello@civicspath.app and we'll explain or fix it.

What we collect

When you visit the marketing website

  • Page views and referrer information via Plausible Analytics — cookie-free, anonymized, used to understand which pages people read
  • If you accept the cookie banner: Google Analytics 4 (GA4) and Meta Pixel — used for conversion attribution and ad targeting. Both drop browser cookies. You can decline these on first visit.

When you sign up for a study account

  • Email address (or Google account identifier if you sign in with Google) — used for authentication and to send essential service emails
  • Study activity — flashcard reviews, mock interview transcripts, readiness scores — used to personalize your study sessions and compute your readiness
  • Optional N-400 biographical answers — when you start a mock interview, we ask permission to capture your answers from your N-400. This data is encrypted at rest with a passphrase you control. We cannot read it without your passphrase.

When you subscribe

  • Stripe handles all payment processing. We never see your full card number. We do receive: your email, the last 4 digits of your card, your billing country, and your subscription status.

How we use it

  • To provide the study app: scheduling your flashcards, generating your readiness score, running your mock interviews
  • To support you: replying to emails, fixing bugs you report
  • To run the business: collecting payments via Stripe, sending essential service emails (subscription receipts, password resets, account deletion confirmations)
  • To improve CivicsPath: aggregated, anonymized analytics in Plausible (page views, drop-off points). If you accept the cookie banner: GA4 and Meta Pixel for conversion analysis.

How we don't use it

  • We do not sell user data. Ever.
  • We do not share your N-400 biographical answers with anyone, including ourselves (we cannot read them — they're encrypted with your passphrase).
  • We do not run targeted advertising inside the study app. Your study activity is not used to show you ads.

Cookies and tracking

The marketing website at www.civicspath.app uses these cookies and tracking technologies:

  • Essential: a session cookie for cookie-banner state (cp_consent)
  • Plausible Analytics: no cookies — uses anonymized server-side aggregation
  • Optional (only if you accept the cookie banner):
    • Google Analytics 4: drops _ga, _gid cookies for conversion measurement
    • Meta Pixel: drops _fbp cookie for ad attribution and lookalike audience building

The study app at study.civicspath.app uses:

  • Essential: an authentication session cookie (HTTP-only, signed)
  • An anonymous-user identification cookie (civicspath-guest-id) issued before signup so we can sync your study state if you create an account later

You can decline non-essential cookies on first visit, change your choice anytime via the cookie banner, or block them with browser settings.

Your rights

You can:

  • Access your data: sign in to study.civicspath.app and view your account
  • Export your data: contact hello@civicspath.app for a JSON export of your study history
  • Delete your account: Settings → Delete account in the study app, or email hello@civicspath.app for assisted deletion. Deletion is permanent and removes all your data within 7 days.
  • Opt out of marketing emails: every email has an unsubscribe link
  • Withdraw cookie consent: change your selection in the cookie banner anytime

If you live in California (CCPA), the EU (GDPR), or another jurisdiction with privacy rights, you have all the rights above plus any additional rights granted by local law. Email us to exercise them.

Data retention

  • Active accounts: retained as long as your account is active
  • Cancelled subscriptions: retained for 90 days after cancellation in case you reactivate, then automatically anonymized
  • Deleted accounts: removed within 7 days
  • Marketing analytics: aggregated indefinitely; individual cookie identifiers expire per the cookie's set lifetime

Third-party services

We use these vendors who may receive your data:

  • Stripe (payment processing)
  • Anthropic (mock interview LLM — N-400 capture passes through here but is sent encrypted)
  • ElevenLabs (audio playback for question pronunciation)
  • Plausible Analytics (cookie-free analytics)
  • Google Analytics 4 (only if you accept the cookie banner)
  • Meta Pixel (only if you accept the cookie banner)
  • Resend / Twilio (transactional email and SMS)
  • Railway (hosting)

We've reviewed each vendor's privacy practices. Email us if you'd like specific details on any of them.

Changes to this policy

If we make material changes, we'll email active subscribers and post a banner on the marketing site for 30 days. Routine clarifications and typo fixes don't trigger notification.

Contact

hello@civicspath.app — replies usually within 1 business day.

CivicsPath is a Grain of Salt company.