Privacy

Bluebear SAT is run by 주식회사 블루베어파트너스. This page says what we collect, why, who else touches it, and what you can make us do about it. It is written to be read rather than survived.

Last updated 15 October 2026

What we collect

Your account: Your name, email address, username, and a one-way hash of your password. If you sign in with Google, Kakao or NAVER we receive your name or nickname, your email address and that account’s ID instead — we ask for nothing else, and we never see your password for it. We keep the account ID so the same Google, Kakao or NAVER account signs you in next time.
What you agreed to: When you create an account we record that you ticked the required box (age, these terms and this policy), and whether you chose to get emails about new tests, study tips and offers, with the time of each.
What you set yourself: Your target scores, the test date you are working towards, and the currency you would rather see prices in.
Your practice: Every answer you give, how long each question took you, which ones you flagged, your scores, and the notes you keep in the error log and vocabulary list. This is the substance of the product — the analytics you are shown are worked out from it.
Your purchases: What you bought, when, for how much, and the Toss Payments order ID. We never see or store your card number or your bank details — those go to Toss Payments and stop there.
Usage: Which pages you visit and roughly where in the world you are, through the services listed below. We do not build advertising profiles of individual students.

Why we are allowed to

Your account and your practice data exist because you asked us for a service we cannot provide without them. Your purchase records exist because we have a contract with you, and because tax law requires us to keep them.

Analytics and advertising measurement are the one part that is not necessary to run your account. When you first visit, you can reject optional measurement, allow analytics only, or allow analytics and advertising. If you choose “Not now,” optional measurement stays off and the prompt leaves the screen for this browser session. Use the control below to choose later, change or withdraw your choice at any time. This is separate from agreement to our terms and from marketing email preferences. We remember the choice in this browser for up to 180 days using local storage (bb_measurement_choice_v1).

Google starts with analytics and advertising storage denied. Without permission it may still receive limited cookieless signals through Consent Mode. Reddit’s pixel loads only after you allow advertising. After withdrawing advertising, use the “Reload now” control to stop a previously loaded pixel. It may continue running until you reload; requests already sent cannot be recalled. If your browser cannot save a choice, we tell you. A denied-only cookie can remember a withdrawal if local storage is unavailable; if both are blocked, the change applies to the current page and you should close it to stop an already loaded service. You can also block third-party scripts in your browser.

We do not sell your data, and we do not share your practice results with anyone outside the services listed below.

Who else handles it

Service	What it does
Supabase	Holds the database, and any figures uploaded with a question.
Vercel	Hosts and serves the site.
Toss Payments	Takes card payment for won passes. Card details go to Toss Payments, never to us.
Resend	Sends verification codes and receipts to your email address, and — only if you chose them — emails about new tests, study tips and offers.
Google	Analytics and Tag Manager, Google Ads, and — if you use it — Google sign-in.
Reddit	An advertising pixel that measures whether our Reddit ads work.
Kakao	Kakao sign-in, if you use it. Kakao tells us your nickname, your email address and your Kakao account ID.
NAVER	NAVER sign-in, if you use it. NAVER tells us your name, your email address and your NAVER account ID.
Anthropic	Writes your Study Priorities and explains words you look up while reviewing. Receives your scores, your answer rate per skill, and the word you looked up with the passage and question it appears in — never your name, email address or account ID.

These companies are based in the United States and elsewhere, so your data leaves your country when you use the site. Each is bound by its own contract with us to handle it only on our instructions.

Transfer overseas · 개인정보의 국외 이전

To run the site we entrust your personal information to the companies below, which hold or process it outside Korea. It is sent over encrypted connections (HTTPS) at the moment you use the site — when you open a page, sign in, practise or pay.

Recipient: Vercel Inc.
Contact: privacy@vercel.com · 440 N Barranca Avenue #4133, Covina, CA 91723, United States
Country: United States (servers in the Washington, D.C. area)
Items: Everything your browser sends while you use the site: IP address, device and browser details, the pages you open, and the account, practice and purchase details passing through
Purpose: Hosting and serving the site
Kept for: Only as long as needed to serve each request and keep short technical logs, and never beyond our contract with Vercel

Recipient: Supabase Pte. Ltd.
Contact: privacy@supabase.com · 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513
Country: Japan (data stored in Tokyo)
Items: Your account (name, email address, username, password hash, and the Kakao or NAVER account ID if you sign in with one), your practice answers and results, notes, and purchase records
Purpose: Storing the database the site runs on
Kept for: For as long as your account exists; purchase records for as long as tax and accounting law requires

Recipient: Plus Five Five, Inc. (Resend)
Contact: support@resend.com
Country: United States
Items: Your email address and name, and the message sent to you (verification codes, receipts and, only if you chose them, emails about new tests, study tips and offers)
Purpose: Sending account and purchase email, and the marketing email you chose to get
Kept for: Only as long as needed to deliver and log each message, and never beyond our contract with Resend

Recipient: Google LLC
Contact: support.google.com/policies
Country: United States
Items: Pages you visit, device and browser identifiers and cookies, approximate location; if you use Google sign-in, your name, email address and Google account ID
Purpose: Analytics, measuring our ads, and Google sign-in
Kept for: Per Google's own retention settings for our analytics account, and never beyond our use of those services

Recipient: Reddit, Inc.
Contact: reddit.com/policies/privacy-policy
Country: United States
Items: Pages you visit, device and browser identifiers and cookies
Purpose: Measuring whether our Reddit ads work
Kept for: Per Reddit's own retention, and never beyond our use of the pixel

Refusing. Vercel, Supabase and Resend are how the site exists at all, so there is no way to use Bluebear SAT without them: if you refuse, do not create an account, or ask us to delete it.

Google and Reddit measurement is not necessary. Block third-party scripts in your browser and it stops; the site still works. Not using Google sign-in keeps your Google account details out of it.

Cookies

We use 11 service and preference cookies, including the fallback that remembers a measurement withdrawal. Optional measurement services may set their own cookies according to your choice.

sat_token	Keeps you signed in. Without it the site cannot tell who you are.
sat_anon	Lets you sit a practice test before you have an account, and hands that attempt to your account when you make one.
sat_currency	Remembers whether you want prices in dollars or won.
sat_target_score	Remembers the target you set before signing up.
sat_test_dates	Remembers which sitting you are working towards.
sat_unlock	Records that a section of an exam has been unlocked for you.
sat_sync_log	A short technical log, used to recover an interrupted exam.
bb_measurement_denied	Remembers a withdrawal of optional measurement when browser local storage cannot save it. This cookie can only turn optional measurement off; lasts up to 180 days.
sat_social_kakao	Ties a Kakao sign-in to the browser that started it, so nobody else can finish it. Lasts 10 minutes.
sat_social_naver	The same, for a NAVER sign-in. Lasts 10 minutes.
sat_social_pending	Holds a Kakao or NAVER sign-in for 10 minutes while you confirm your email address.

Students under 14

Most people preparing for the SAT are teenagers, and this page is written for them rather than for their lawyers.

If you are under 14, ask a parent or guardian before you make an account. If you are a parent and would rather your child did not have one, email us and we will delete it and everything attached to it.

Keeping it safe

The site is served over HTTPS, and the database sits behind access controls. A password you chose yourself is stored as a bcrypt hash, which means we cannot read it.

One honest exception: when an administrator creates an account for you — a class roster, say — we keep the initial password we set, so that we can tell you what it is. Change it once you are in and it stops being recoverable by anyone.

We keep your account and your practice history for as long as your account exists. Tell us to delete it and we will.

What you can make us do

See what we hold: Most of it is already in front of you while signed in — your results, your answers, your notes and your purchases. Email us for anything else.
Correct it: Your name and your targets are editable in Settings. Email us to change an email address.
Stop marketing emails: Turn them off in Settings, use the unsubscribe link in any of them, or email us. Verification codes and receipts still arrive, because the account needs them.
Delete your account: Email us and we will delete your account and your practice history. Records of a payment are kept for as long as tax and accounting law requires, because we are not permitted to delete those on request.
Take it with you: Ask, and we will send you your results and answers in a machine-readable file.
Object, or complain: Email us first. If you are in Korea you may also complain to the Personal Information Protection Commission; in the UK or EU, to your national data protection authority.

Asking us anything

Write to johnny@bluebearprep.com. A person reads it. If we change this page in a way that matters, we will say so here and move the date at the top.

SAT® is a registered trademark of the College Board.