Legal

Privacy Policy

Last updated: August 2026

This Privacy Policy explains what NursingCEA (“we,” “us,” “our”) collects when you use nursingcea.com and the Service, how we use and share it, how long we keep it, how we protect it, and the choices and rights you have. We keep data collection to what the Service needs, and we do not sell your personal information. By using the Service you agree to this Policy; if you do not agree, do not use the Service. NursingCEA is a free practice-and-study resource only; it is not a continuing-education provider and grants no CE credit, certificates, or accreditation.

Information we collect

• Email address — when you enter it to get your results, sign in, or create a free account.
• Profile details you choose to provide — your name, phone number, state, nursing/healthcare role, license-renewal month, and an optional profile photo (avatar). You add these at the end of a practice test or in your dashboard profile; all are optional beyond the email you sign in with. Your state helps us show your state’s licensing information with your results and measure demand by state.
• Practice activity — the quizzes you take, questions you flag, and answers you submit, so we can grade, save your score, and show weak areas and progress.
• AI tutor questions — if you use the optional “Ask the tutor” feature, the question you type. This is sent, along with the on-screen practice-question content, to our AI provider to generate an answer (see below). We do not send your name, email, or account credentials.
• Usage & device data — standard analytics such as pages viewed, referring page, approximate/general location (derived from IP), and device/browser type, to understand and improve the Service and to keep it secure.
• Time spent studying (signed-in members only) — if you are signed in, we record roughly how much active time you spend on the site, kept as a single running total for each day. It only counts while the site is the tab you are looking at and you have interacted recently, so a tab left open in the background or overnight does not count, and it is capped each day. We do not keep a page-by-page or minute-by-minute history of your visits, and none of this is recorded for visitors who are not signed in.
• Country — the two-letter country your connection appears to come from (for example US, PH, CA), so we can understand where our users are. We store the country code only. We do not store your IP address against your account; your IP is used momentarily to protect the Service from abuse and to determine that country code, and is not retained in your account record.
• Anti-abuse signals — a bot/spam-protection token when you submit certain forms, and rate-limit counters, to prevent abuse.

We do not intentionally collect sensitive personal information, and you should not submit patient information, protected health information, or other confidential data to the Service (including the AI tutor).

How we use your information

• operate the Service — grade practice tests, save scores, run your dashboard, and generate tutor answers you request;
• send you the sign-in link/code and other transactional messages, and — only if you opt in — occasional practice reminders;
• understand aggregate demand (including demand by state and by country) and improve our content and features;
• see which parts of the Service people actually use and how much time they spend studying, so we know what to build, fix, and keep;
• maintain security, prevent fraud and abuse, and enforce our Terms; and
• comply with legal obligations.

Legal bases (for EU/UK visitors): we process your data to perform our agreement with you (providing the Service), based on your consent (e.g. opt-in reminder emails, which you can withdraw at any time), and for our legitimate interests (securing and improving the Service), and to meet legal obligations.

Cookies, local storage & similar technologies

We use a first-party session cookie to keep you signed in, local storage in your browser to hold an in-progress practice test so you can resume it, and analytics cookies to measure usage. We do not use third-party advertising cookies or sell data to advertisers. You can clear cookies and local storage in your browser at any time (clearing the session cookie signs you out).

Who we share it with (service providers)

We share data only with the service providers (“processors”) that operate the Service, and only as needed to run it under agreements that require them to protect it:

• Hosting and infrastructure — running the site, storing your account and practice data, caching, and optional profile-photo storage.
• Email delivery — sending your sign-in link or code and any reminders you opt into.
• Spam and bot protection — verifying that form submissions come from a person.
• AI tutor — generating optional tutor answers. Only your typed question and the on-screen practice-question content are sent; no account information is shared. The provider operates under its own terms and privacy policy, which we do not control, and may log or retain what is sent to it. Answers are AI-generated and may be inaccurate — see our AI-content disclaimer.
• Usage measurement — aggregate, privacy-respecting analytics about how the site is used.

We may also disclose information if required by law, to respond to legal process, to protect our rights, safety, or property, or in connection with a merger, acquisition, or sale of assets. If ownership or control of the Service changes in that way, your information may transfer as part of the transaction; we will notify you by email and/or a notice on the Service, and after the transfer the new owner’s privacy practices will govern your information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Data retention

We keep your account and practice history while your account is active, so your progress persists. If you do not sign in for an extended period (currently up to about 24 months after your last sign-in), or after you ask us to delete your account, we delete or de-identify your personal information, keeping it only as long as we still reasonably need it to operate the Service, resolve disputes, and meet our legal obligations. Email sign-in codes expire within about ten minutes, and sign-in links expire shortly after they are issued. Anti-abuse and rate-limit records are kept only for a limited time to protect the Service. Daily study-time totals and your country code are kept alongside your account and are deleted with it. Aggregated or de-identified data (which can no longer identify you) may be retained indefinitely. You can request deletion at any time (see below).

Security

We use industry-standard measures to protect your data, including encrypted (HTTPS) connections, hashed session tokens, passwordless sign-in, and rate limiting. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to address incidents appropriately if they occur.

Your privacy rights & choices

Depending on where you live, you may have some or all of the following rights. We honor these choices regardless of where you live, to the extent practical:

• Access / know — request a copy of the personal information we hold about you.
• Correct — update your profile details in your dashboard, or ask us to correct them.
• Delete — ask us to delete your account and associated data.
• Portability — request the data you provided in a commonly used, machine-readable format (such as JSON or CSV) where technically feasible.
• Opt out of email — unsubscribe from any reminder email using the link in it; you’ll still receive essential sign-in/transactional messages.
• Practice without an account — most of the Service works logged out.

To exercise a right, contact us (below). We may need to verify your identity before we act — usually by confirming control of the email address on your account — and we will respond within the time required by applicable law, telling you if we need more time and why. You may use an authorized agent where the law allows. We will not discriminate against you for exercising these rights.

California residents (CCPA/CPRA)

If you are a California resident, you have the rights to know, access, correct, and delete your personal information, to opt out of the “sale” or “sharing” of it, and to limit the use and disclosure of sensitive personal information to what is needed to provide the Service. We do not sell or share your personal information as those terms are defined under California law, we do not knowingly sell or share the personal information of minors, and we do not use sensitive personal information beyond what is necessary to operate the Service. You may exercise your rights, or use an authorized agent to do so, by contacting us; we will not discriminate against you for exercising them.

EU/UK & international visitors (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights to access, rectify, erase, restrict, and object to processing of your personal data, and to data portability, and you may lodge a complaint with your local supervisory authority. The legal bases for our processing are described above. NursingCEA is operated from, and its providers process data in, the United States and other countries; where we transfer personal data internationally, we rely on appropriate safeguards where required. By using the Service, you understand your data will be processed in the United States.

Children’s privacy (COPPA)

NursingCEA is intended for adults pursuing or holding a nursing or allied-health credential and is not directed to minors. Our Terms require users to be at least 18. Consistent with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13; more broadly, we do not knowingly collect it from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will delete it.

Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for how to respond, we do not currently respond to DNT signals, but we do not use third-party advertising tracking regardless.

Changes to this Policy

We may update this Policy; the “last updated” date reflects the current version. For changes that materially affect how we handle your personal information, we will take reasonable steps to notify you before they take effect — for example, by email or a notice on the Service. Continued use of the Service after changes take effect means you accept the updated Policy.

Contact us

Questions or privacy requests? Visit our contact page or email legal@nursingcea.com. The Service is operated under the name NursingCEA. See also our Terms of Service and Disclaimers.