Privacy notice
Effective September 8, 2026. DATAMED CONSULTING LLC operates Board Review. This notice describes the information used to provide our medical education service.
Information we use
We process your account name, email, authentication information, study sessions, answers, progress, subscription status, and support requests. Hosting providers also process technical request information needed to operate and secure the site. Do not submit patient information, card details, passwords, or confidential examination content through support.
Why we use it
We use this information to sign you in, save and grade practice, show your progress, provide paid access, investigate errors, prevent abuse, and handle support. We also measure use of key study and purchase features to improve the service. Support forms use a hashed network identifier for rate limiting; it is not displayed to support staff.
Service providers
Supabase provides authentication and database services. Our current authentication infrastructure is shared with MasterCCS, another service operated by us; Google may display Master CCS during consent. PM&R study records and subscription access are handled separately. Vercel hosts the website. Stripe processes payment details and subscriptions; Board Review does not receive your full card number. When you choose Google sign-in, Google shares the account information described on its consent screen. Providers may process information outside your country.
Cookies and analytics
Necessary cookies keep you signed in. Browser storage saves study display preferences. We measure use of the service in two ways, neither of which involves advertising cookies or a consent banner. First, every visit is counted by Vercel Web Analytics, our hosting provider's page-view measurement: it uses no cookies, identifies visitors only by a short-lived hash that is discarded daily, and receives page paths and browser type. Second, we count daily use of the sample, signup, study, and checkout features using a random browser identifier and daily hashed network identifiers. Neither measurement receives question text, answers, email addresses, or payment details, and feature records older than 90 days are removed when new ones are recorded. Google Analytics loads only if it is configured. We do not sell your personal information or use your question answers for advertising.
Retention and account requests
We retain account and study records while needed to provide the service, and billing or security records where needed for accounting, disputes, or legal obligations. Use the support form to request access, correction, export, or deletion. We verify ownership before acting. Because sign-in is shared, we will clarify whether a request concerns Board Review data or your shared login before deleting an account. Backups may retain information until their normal retention period ends.
Your choices and contact
You can use email sign-in instead of Google and decline optional analytics. The service is intended for adult medical learners. Use support for privacy questions or concerns. We will update this notice when our data practices change.