Privacy policy
Last updated: October 28, 2026
Short version: we collect what you type into our forms and how you found us, so we can send you the Gotcha Sheet and the SAT emails you asked for. We don't sell it. Students under 13 can't sign up. Email [email protected] to see, fix or delete your data.
Who we are
Gotcha Prep runs gotchaprep.com: free explainers for the traps on the Digital SAT, the free Gotcha Sheet, and Gotcha Daily, our paid daily drills. Questions about this policy go to [email protected].
What we collect
When you sign up on one of our forms:
- your email address
- whether you're a student, a parent or a tutor or teacher
- your next SAT date, if you pick one
- for students, only the fact that you passed our age check. We ask for your birth month and year, check them in your browser, and never send or store them.
- from the quiz, which traps you missed, if you ask us to email your Trap Profile
- from the study plan, your test date, minutes a day and weak spot, if you ask us to email the plan
- that you joined the founding list for Gotcha Daily, if you did
- how you found us: the campaign tags in the link you clicked (UTM tags), the ad click ID Meta, TikTok, Google or Snapchat adds when you came from an ad, and the first page you visited
- the date and time you signed up
If you apply to be a coach: your name, email, school, best SAT score, strongest section, hours a week and anything you add in the note.
When you browse:
- Cloudflare, which delivers our site, processes your IP address and browser details to serve pages and block attacks. Cloudflare Web Analytics gives us visit counts without cookies.
- Ad pixels, only when we turn them on: the Meta Pixel, the TikTok Pixel and Google Analytics receive your page visits and a "signed up" event from your browser, and may set their own cookies. They never get your email address from us.
- Your browser keeps a few things for us: for the length of your visit (session storage), how you arrived and the email you signed up with, so you don't type it twice; and, if a student's age check doesn't pass, a cookie for 24 hours.
Why we use it
- to send what you asked for: the Gotcha Sheet, your Trap Profile, your study plan, test-date reminders, the daily trap and news about Gotcha Daily
- to tailor those emails to students or parents and to your test date
- to see which videos, posts and ads bring people in, and stop paying for the ones that don't
- to review coach applications
- to keep the site and our data safe
We send email through Kit and ask you to confirm your address first. Every marketing email says who it's from, includes our postal address and has a one-click unsubscribe link. Unsubscribing works right away and stops all marketing email (CAN-SPAM). Messages that deliver something you asked for, like the Gotcha Sheet or a receipt, may still arrive.
Who processes it for us
- Supabase, the database software we run on our own server: stores signups and coach applications.
- Kit (kit.com): sends our emails.
- Whop (whop.com): takes payments and runs memberships. We never see your full card number.
- Cloudflare (cloudflare.com): delivers and protects the site, counts visits, and forwards mail sent to [email protected].
- Meta, TikTok and Google: only when ad pixels are on, as described above.
They handle your data only to run Gotcha Prep. We don't sell your personal information, and we don't give your email address to anyone for their own marketing. We share information otherwise only when the law requires it.
How long we keep it
- Signups: until you unsubscribe or ask us to delete them. After you unsubscribe, we keep only your email address on a do-not-email list, so you never get marketing email from us again.
- Coach applications: until we decide, and up to a year after if we don't hire you, unless you ask us to delete yours sooner.
- Purchases: Whop keeps payment records for as long as the law requires.
- Anything from a child under 13: deleted as soon as we learn about it.
Students under 13
Gotcha Prep is for high school students, parents and teachers. Students under 13 may not sign up. Our forms ask students for their birth month and year; when the answer is under 13, the form sends nothing and asks a parent to sign up instead. We don't knowingly collect personal information from children under 13 (COPPA), and if we find out we have some, we delete it. Parents and guardians can email[email protected] to see or delete their child's information.
Your choices
- Unsubscribe with the link at the bottom of any email.
- To see, fix or delete your data, email [email protected] from the address you signed up with. We reply within 30 days.
- Parents and guardians can make these requests for their teen.
- You can block or clear cookies in your browser; the site still works without them.
- Our site doesn't respond to "Do Not Track" signals. With ad pixels off, we don't track you on other sites.
Security
Signups travel over HTTPS and are stored on our own server. Our forms can add a signup but can't read any back, and only the owner can see the data. No system is perfectly secure; if a breach affects your data, we'll tell you.
Changes
When we change this policy we update the date at the top. If a change affects how we use your email address, we'll email you before it applies.