Introduction: A Manifesto of Data Stewardship
Establishing digital trust is a fundamental requirement for any professional organization dedicated to the science of Applied Behavior Analysis. We recognize that privacy is not just a policy but a core human right that must be protected with the same precision as our clinical content. Our **Data Stewardship Manifesto** ensures that we only collect what is necessary to support your path to board certification.
Developing a transparent relationship with our students requires a clear and educational approach to data governance. This policy describes how we collect, protect, and utilize your information to enhance your interactive learning experience. We avoid the opaque jargon found in standard legal text, opting instead for a human-centered policy that prioritizes your educational security.
Rooting our commitment to privacy in the RBT Ethics Code reinforces the values of confidentiality and client dignity. While you are a student rather than a clinical client, we believe that the same high standards of professional integrity must apply to our partnership. Your trust remains the foundation of our community, and we are dedicated to preserving it through rigorous information management.
Information We Collect: Technical and Practical Data
To provide a high-performance educational experience, we collect several categories of information. These can be broadly divided into "Actively Provided Data" and "Automatically Collected Data."
Actively Provided Information
This includes information you choose to provide to us directly. For example, when you contact our support team via the email addresses provided on our Contact Page, we collect your name, email address, and the content of your message. If you participate in our community forums or provide feedback on our clinical content, we store that information to improve our services.
In the future, should we implement a centralized account system, we may collect your username, password (encrypted), and educational background to provide a more personalized study path. Currently, most of this data is stored in your local browser state to maximize your privacy.
Automatically Collected Information
When you access our platform, our servers automatically record certain technical details. This is necessary for the stability and security of the site. This data includes:
- Device Metadata: Information about the device you are using, such as its operating system, browser type, and screen resolution. This helps us ensure our "Mobile-First" design remains compatible with your gear.
- Log Data: Technical logs including your IP address (anonymized where possible), time of access, and the specific pages you visit. This is used for technical troubleshooting and server load management.
- Usage Patterns: We collect data on how you interact with our practice exams and study guides. For example, we track which questions are most frequently answered incorrectly. This data is used to audit our clinical content for clarity and difficulty scaling.
We do not use this data for invasive behavioral profiling. Instead, we use it to ensure that our curriculum remains responsive to the needs of the RBT community. Technical performance and academic reliability are our only metrics for success.
How We Use Your Information: Service and Science
The primary reason we collect data is to improve the quality of your exam preparation. Every data point we analyze is tied back to a specific educational or technical goal.
Service Delivery and Maintenance
We use your technical data to maintain a fast, reliable, and accessible platform. For example, if we see a spike in "Page Not Found" errors on a specific study guide, our technical team uses server logs to identify and fix the broken link. We use usage data to balance our server load, ensuring that our platform remains responsive even during peak study hours (such as the evenings before common Pearson VUE testing dates).
Clinical Auditing and Content Improvement
This is perhaps our most important use of data. By analyzing aggregate student performance—without identifying individual users—we can identify "Misleading Answer Choices" or "Conceptual Gaps" in our curriculum. If 90% of users miss a specific question on Extinction Procedures, it's a signal that the question may be poorly phrased or the corresponding study guide needs more detail. We review those patterns when auditing content.
Communication and Support
We use your contact information solely to respond to your inquiries. We do not sell your email address to third-party marketing firms. If you send us a clinical question, we share that message with our internal BCBAs to provide an authoritative response. Your communication with us is treated with the same confidentiality we expect in a clinical setting.
California Privacy Rights (CCPA / CPRA)
California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know what personal information we collect about you and how it's used.
- Right to delete personal information we hold (except where retention is legally required).
- Right to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising — including the Google AdSense personalized ads served on this site.
- Right to non-discrimination for exercising any of the above.
Do Not Sell or Share My Personal Information: To opt out of personalized ads on this site, decline the cookie consent banner that appears on first visit, or clear your cookie_consent_time localStorage entry and decline on the next prompt. You can also use the Digital Advertising Alliance opt-out tool to disable personalized advertising across most ad networks at once.
To exercise any other CCPA right, email privacy@rbtpracticetest.help with your request and a way to verify your identity. We respond within 45 days as required by law.
Security Framework: Protecting the Learner
Data security is a core pillar of our organization. We implement a "Defense in Depth" strategy to protect our servers and your information. This includes:
- Encryption: All data transmitted between your browser and our servers is protected using Secure Socket Layer (SSL)/Transport Layer Security (TLS) encryption. You can see this in your browser's address bar as the 'https' prefix.
- Access Control: Only a mission-critical number of employees have access to our administrative back-end. All such access is logged and monitored for suspicious activity.
- Regular Audits: Our technical team performs weekly security audits to identify and patch potential vulnerabilities. We believe in staying ahead of threats to ensure your study environment remains safe.
- Data Minimization: Our most powerful security feature is that we simply don't collect what we don't need. By not storing your social security number or credit card details, we eliminate the risk of that data being compromised.
While no system is 100% secure, we follow industrial best practices to ensure that your data is as safe as possible. In the event of a data breach, we committed to notifying our users and the relevant authorities within 72 hours of discovery.
International Data Transfers: GDPR and CCPA
RBT Practice Test is a global resource. While our servers are primarily located in secure facilities in North America and Western Europe, we recognize that our users come from all over the world. We are committed to upholding the highest global standards for data protection, including the General Data Protection Regulation (GDPR) for our users in the European Union and the California Consumer Privacy Act (CCPA) for our users in the United States.
When we transfer data across borders, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs). We believe that your privacy rights should travel with you, regardless of where you are located. Our "Privacy by Design" approach ensures that these legal frameworks are integrated into the very architecture of our platform.
User Rights: You are in Control
Under modern privacy laws, you have specific rights regarding your personal data. At RBT Practice Test, we extend these rights to all our users globally:
- Right to Access: You have the right to request a copy of the personal information we hold about you.
- Right to Correction: You have the right to ask us to correct any inaccurate or incomplete information.
- Right to Erasure (The "Right to be Forgotten"): You have the right to ask us to delete your data from our systems. Currently, since most data is local to your browser, you can often do this yourself by clearing your browser cache.
- Right to Object: You can object to our processing of your data in certain circumstances.
To exercise any of these rights, please contact our Data Protection Officer at the email address provided in the Contact DPO section below. We will respond to your request within 30 days and will not charge a fee for standard requests.
Children's Privacy: A Professional Context
RBT Practice Test is designed for adults pursuing a professional certification. We do not knowingly collect information from children under the age of 13—or under the age of 16 in certain jurisdictions with stricter requirements (such as under the GDPR). If we learn that we have inadvertently collected data from a minor, we will delete it immediately from our servers.
We recognize that many RBTs work with children. We remind our students to never post identifiable information about their own clients (such as names or photos) in our feedback sections or community areas. Maintaining client confidentiality is not just a site rule; it is a core professional requirement for anyone working in behavioral health.
Legal Context and Compliance
This policy is governed by the laws of our primary operating jurisdiction. However, we strive to meet or exceed the requirements of all jurisdictions where we have a significant user base. We believe that ethical data management is more than a legal obligation; it is a clinical necessity. By protecting your privacy, we are protecting the integrity of the behavioral analysis profession.
We are currently working toward HIPAA-compliance for our future account-based features, ensuring that even the highest standards of medical privacy can be met on our platform. Your educational progress is a sensitive matter, and we treat it with the appropriate level of gravity.
Changes to this Policy: An Evolution of Privacy
As our platform grows and privacy laws evolve, we will update this policy accordingly. When we make significant changes, we will notify you by posting a prominent notice on our homepage or by sending an email if we have your contact details. We recommend checking this page periodically to stay informed about our latest privacy practices.
The "Last Updated" date at the bottom of the page will always reflect the most recent revision. We believe that being informed is part of being a professional; we encourage you to read our updates with the same focus you bring to your study guides.
Contact Our Data Protection Officer
If you have any questions or concerns regarding this policy or our data practices, please reach out to our dedicated Data Protection Officer (DPO). This individual is responsible for overseeing our privacy framework and ensuring that we remain compliant with global regulations.
Email: privacy@rbtpracticetest.com
Please include "Privacy Inquiry" in the subject line to ensure your message is prioritized. We are happy to provide further clarification on any aspect of our data stewardship strategy.
Privacy & Data Security FAQ
No. We only use your IP address to determine your general region (country/state) for server load balancing and legal compliance. We do not collect precise GPS data.
Not by us. Currently, your scores are stored locally in your browser. If you choose to share a screenshot of your score with your supervisor or employer, that is your decision. We do not provide automated reporting to third-party agencies at this time.
To delete all data currently stored by RBT Practice Test, simply clear "Site Data" or "Cookies and Cache" in your browser settings. This will reset your score progress and preferences. For any data we may store on our servers (such as email correspondence), please contact our DPO.
We do not record visual or audio data of your study sessions. We only collect text-based usage patterns (e.g., "User clicked on Category B: Assessment") to improve our site navigation and curriculum layout.
We generally maintain support correspondence for a period of two years to provide continuity of service. After that, we purge or anonymize the data unless it is required for legal or clinical audit purposes.
Last Updated: January 30, 2026. This policy was completely revised to ensure purely technical and ethical transparency for the RBT community.