Privacy Policy

Last updated November 1, 2026

Shortcutdrill is run by Dravari, LLC, a Delaware limited liability company based in Wilmington, Delaware, USA ("we"). This page explains what personal information Shortcutdrill collects, why, who it is shared with, how long it is kept and what you can do about it. Questions or requests: support@shortcutdrill.com.

What we collect

Your account: your email address and your password, which is stored only as a salted one-way hash. If you sign in with Google, Microsoft or GitHub, we receive only your email address and an account ID from that service; we never see your password there.
Your practice: which drills you finished and your best times, so you can continue on any device.
Reports you send: if you report a check as unfair, the answer you submitted, your optional note and a one-way hash of your IP address, used only to limit spam.
Payments: Stripe processes payments. We never see or store your card number. We receive your email, a Stripe customer reference, the plan you bought and the payment status.
Proof of consent and refunds: when you buy, a record that you agreed to the renewal terms and the Terms, with the time and a one-way hash of your IP address; and a record of any withdrawal and refund.
Security logs: our hosting providers keep short-lived technical logs (IP address, browser, pages requested) to keep the site running and safe.

Cookies and browser storage

Shortcutdrill uses one cookie, set only when you log in, to keep you logged in. Signing in with Google, Microsoft or GitHub also sets a short-lived cookie that protects the sign-in and is removed within ten minutes. Progress for visitors without an account is kept in your own browser's local storage. There are no advertising cookies, no analytics cookies and no tracking across other websites. Fonts are served from Shortcutdrill itself. Because we do not track you, browser "Do Not Track" signals do not change anything on this site.

How we use it, and our legal basis

To provide your account, practice and Pro access (performing our contract with you).
To take payments, refunds and cancellations (performing our contract with you).
To keep payment, consent and refund records (legal obligations under tax and consumer law).
To prevent abuse and fix wrong checks (our legitimate interest in running a safe, accurate service).
To answer your emails, and to send emails about your account or subscription.

We do not sell your personal information, and we do not share it for advertising.

Who we share it with

Stripe, for payments (stripe.com/privacy).
Our hosting providers, Cloudflare and Higgsfield, which store and serve the site and its database.
Authorities, only when the law requires it.

These providers may process data in the United States and other countries. Where the law requires it, transfers are covered by safeguards such as the European Commission's standard contractual clauses.

How long we keep it

Account and practice data: until you delete your account.
Reports: up to two years.
Payment, consent and refund records: as long as tax and consumer-protection law require, at least three years.

Your rights

You can see, correct, download or delete your data, and object to or limit how it is used. Delete your account at any time on the Account page; for anything else, email support@shortcutdrill.com. We answer within 30 days. If you are in the EU, the UK or California you have these rights by law, and in the EU and UK you can also complain to your data protection authority.

Children

Shortcutdrill is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, email us and we will delete it.

Changes

When this policy changes, the date at the top changes. For important changes we also tell account holders by email or with a notice on the site.