Last updated October 13, 2026
Without an account
Your answers, streak, XP, Mistake Bank and settings are saved in your browser's local storage on your own device. They aren't sent to us. If you clear your browser's site data, that progress is gone.
With an account
- Username. It shows on leaderboards and in leagues, so don't use your full name.
- Password. We store it scrambled (hashed with scrypt), so nobody, including us, can read it.
- Your practice. A copy of your progress is saved to your account so it works on any device.
- Leaderboards. Your username and your XP for the week are visible to other players on the weekly board and in any league you join.
Accounts don't ask for an email, a real name or a birthday. You stay logged in with a secure cookie that only exists to keep you signed in.
Messages you send us
If you use the contact form, we receive your email, your message and your name if you give one, so we can reply. Forms are handled by Netlify Forms, part of the company that hosts this site. We don't sell, rent or share your information with anyone.
No ads, no tracking
Lock In has no ads, no analytics scripts and no tracking pixels. The only cookie is the one that keeps you logged in if you make an account, which is why there's no cookie banner.
Services the site loads
A few outside services are needed to run the site. Like any website request, each one can see your IP address and browser type when your browser contacts it.
- Netlify hosts the site, stores accounts and keeps standard server logs for security and reliability.
- Google Fonts serves the fonts.
- cdnjs (Cloudflare) serves a couple of open-source scripts for animations and confetti.
- Desmos provides the graphing calculator. It only loads when you open the calculator during a math question, and Desmos's own privacy policy covers it.
Kids and teens
Lock In is made for high school students getting ready for the SAT. It isn't aimed at children under 13, and we don't knowingly collect personal information from them. If you're under 13, please don't make an account or use the contact form. If you're a parent and think your child did, contact us and we'll delete it.
Deleting your data
You can delete your account yourself anytime: Profile, then Delete account. That removes your username, password, saved progress and leaderboard entries right away. To get a message you sent us deleted, ask through the contact form and we'll do it within 30 days.
How long we keep things
Accounts are kept until you delete them. Contact messages and older waitlist emails are kept only as long as we need them.
Changes
If this policy changes, we'll update it here and change the date at the top.
Questions about privacy? Get in touch.