CRNA Prep Hub helps nurses research CRNA programs and prepare their applications. This policy explains what we collect, why we collect it, who sees it, and what you can do about it. It is written to be read rather than to be survived.
Information you give us
Account details. Your email address and a password when you register. Passwords are handled by our authentication provider, Supabase, and stored as salted hashes. We never see or store your password.
Content you create. Mock interview answers, personal statements, resumes, GPA and transcript figures, school notes and messages you send us. This is yours. We do not sell it and we do not share it with advertisers.
Payment details. Payments are processed by Stripe. We never receive or store your card number. We keep a record of what was purchased and when, which is what our own accounting and your access depend on.
Artificial intelligence features
The mock interview, resume review, personal statement analysis and transcript reading features work by sending the text you provide to OpenAI, which generates the response you see. That means the content you put into those tools leaves our servers and is processed by OpenAI under their terms.
If there is anything you would not want a third-party provider to process, please do not put it into those features.
Information we collect automatically
We keep our own basic record of how the site is used, so we can tell which pages help people and where our visitors come from. When you allow it, we store:
- a random identifier in a cookie, which identifies a browser and not a person;
- which pages were viewed, and in what order;
- the website that referred you — the site name only, such as
google.com, never the full address; - any campaign tag in the link you followed;
- whether you were on a phone, tablet or computer, and which browser family.
We do not store your IP address, and we do not use fingerprinting or any other technique that would identify you across other websites. We never record the query string of a page address, because that is where things like password-reset tokens live.
If you create an account, we link that browser identifier to your account so we can understand how people find us. If your browser sends a “Do Not Track” signal, we record nothing at all.
Advertising
We advertise on TikTok and Google. With your permission, both place their own cookies on your device and receive information about your visit, including the pages you view. When you register, we also tell TikTok that a registration happened, which includes the email address you used.
None of this happens unless you have allowed advertising cookies. Their own policies govern what they do with it: Google and TikTok. You can also opt out of personalised Google advertising at adssettings.google.com.
Cookies we use
| Cookie | Purpose | Lasts |
|---|---|---|
| Supabase auth cookies | Keep you signed in. Required — the site cannot work without them. | Session |
| cph_consent | Remembers the privacy choices you made on this page. | 180 days |
| cph_vid | A random id so we can tell a returning visitor from a new one. | 180 days |
| cph_sid | A random id that groups one visit together. | 30 minutes |
| Google and TikTok cookies | Advertising measurement, set by those companies. | Set by them |
Your privacy choices
You can change your mind at any time, and turning something off takes effect on the very next page you load.
You can also clear these cookies at any time in your browser settings, and most browsers let you block them entirely.
How long we keep things
Deleted after 400 days. The record of which pages were viewed and which visits happened — for everyone, whether or not you have an account. If you have never registered, this is everything we hold about you, and after 400 days there is nothing left.
Kept while you have an account. If you registered, we keep one short record linking your account to how you first arrived: the date of your first visit, the site or campaign that referred you, and the first page you landed on. We keep it so we can understand which of our efforts actually help nurses find us. It is not deleted on the 400-day schedule, because it is tied to your account rather than to your browsing.
Deleting your account. When your account is deleted, that link is severed immediately and the remaining record becomes anonymous. It is then deleted on the normal schedule, within 400 days of your last visit.
The content you created — interviews, resumes, statements, messages — is kept until you ask us to delete it.
Your rights
Email support@crnaprephub.com to ask for a copy of your data, to correct it, or to delete your account and everything in it. We will respond within 30 days and we will not treat you differently for asking.
Depending on where you live you may have additional rights — for example to object to processing, or to lodge a complaint with your local data protection authority. Write to us first and we will try to sort it out.
Children
This service is for adults pursuing graduate nursing education. It is not directed at anyone under 18 and we do not knowingly collect information from children.
Changes to this policy
If this policy changes we will update the date at the top of this page. If the change is significant, we will ask for your privacy choices again.
Contact
Questions about any of this: support@crnaprephub.com.