Work in Play LLC · Cognitive Cat Prep

Cognitive Cat Prep privacy policy

Effective October 30, 2026.

Work in Play LLC ("we," "us" or "our"), based in Brooklyn, New York, operates Cognitive Cat Prep. This policy explains how we handle information when you use this plugin, its public pages or support. The separate website has its own privacy policy; its account, payment, voice and website analytics practices do not automatically apply to this anonymous plugin.

1. Information we process

• Practice information. Your selected practice domain, drill size and timing preference; an opaque drill handle; assigned questions; your selected answers or skips; and server timing, grades, checked explanations and summaries. The pacing calculator processes the numeric inputs you provide to calculate a practice plan, without creating a drill record. The host platform may retain that tool interaction separately.
• Abuse-control information. When available, the server hashes an identifier supplied by the host platform. Otherwise, it hashes a network address supplied by Cloudflare. We store the resulting quota identifier and bucket counts to enforce usage limits. The hashed identifier can link requests for rate limiting; it is not authenticated account identity and is not used to link a drill to a paid website account.
• Technical information. Our hosting provider processes requests, which may include IP addresses, user-agent and device information, request metadata, security events and diagnostic logs. Requests may include other host metadata; the application does not persist location metadata or unrelated chat history.
• Support information. Your email address, message and any diagnostic information or drill handle you choose to send us.

The plugin does not require a service account or payment information. Its application storage does not persist full chat transcripts, email addresses from the host, passwords, payment details, voice recordings or paid website account records. Account-free use does not make technical request data or support messages unidentifiable. Do not send sensitive personal information, health information, government identifiers, credentials, confidential assessments or another person's private information.

2. How we use information

We use this information to create and resume requested drills, present questions, record answers and skips, enforce timing, calculate results, return checked explanations, support results-based coaching, calculate pacing plans, protect availability, prevent misuse, investigate errors and respond to support and privacy requests. We may also process information to meet legal obligations and protect rights and safety.

Practice results are educational feedback. We do not use them to make hiring or employment decisions, produce official assessment reports or establish a verified cognitive profile.

3. Recipients and host-platform processing

Cloudflare provides server hosting, storage, delivery and security, and processes technical requests and diagnostic logs. Service providers handling support correspondence process the information needed to deliver and address that correspondence.

The host application receives tool interactions, displayed questions, selected answers, checked results and widget context so it can present the drill and provide conversational coaching. The widget updates the host with the current drill's checked feedback and summary; choosing Ask for coaching sends a message requesting help with those results. The plugin server operates on the tool inputs sent to it and does not request or reconstruct the full conversation. When you use this plugin through a service supplied by OpenAI, OpenAI processes that host conversation, tool interaction and widget state under its own terms and privacy controls. This factual description of data processing does not mean that the platform operates, sponsors or endorses Cognitive Cat Prep. The plugin server does not send coaching requests to an additional AI provider.

We may disclose information when required by law; to investigate fraud, abuse or security incidents; to protect rights, property or safety; or in connection with a merger, acquisition or transfer of our business, subject to applicable protections. We do not sell personal information or share it for cross-context behavioral advertising.

4. Cookies, widget state and external pages

Where supported, the widget saves its drill handle in host-managed widget state to resume the server-owned drill. Clearing that state may prevent resuming a drill. The plugin does not embed advertising trackers or session replay and does not use the separate website's account cookies to link practice to a paid account. The hosting provider and host platform may operate their own security and storage mechanisms.

If you separately visit the main website, its own privacy policy and analytics practices apply. Its records and controls are separate from this plugin's storage.

5. Retention and security

Drills: records expire 24 hours after creation. The server schedules deletion at that time; a service interruption may delay physical deletion. Usage limits: quota records are scheduled for deletion within two fixed bucket periods, up to 48 hours for the daily bucket. Technical logs: Worker diagnostic logs are retained for up to seven days under the current hosting plan, separately from drill expiry. The hosting provider manages other infrastructure and security records under its own applicable retention settings. Support: we retain correspondence as needed to address the request and related security, dispute or legal obligations.

We use access controls, encrypted transport and limited data collection to protect information. A drill handle grants access to its drill: treat it as private and do not post it publicly. No online service or transmission method guarantees complete security. Information retained by the host platform, including conversation history, follows its separate retention and deletion controls.

6. Your choices and privacy requests

You can choose untimed practice, skip a question, end a drill, stop using the service or disconnect the plugin. Finishing a drill, clearing widget state or disconnecting does not immediately delete the server's drill record; the expiry described above still applies. The widget has no immediate server-record deletion control. Contact support if you want to request deletion before expiry. You can manage conversation history and host permissions through the host platform's controls.

Contact support@cognitivecatprep.com to request access, correction, deletion or a copy of information we hold, or to raise a privacy concern. Depending on your location, you may also have rights to object to or restrict processing. We may need enough information to verify and locate the relevant record. Because drills are anonymous and short-lived, we may be unable to identify a record without its drill handle. Share identifiers only through private support correspondence. We may retain limited information where necessary for legal, security or dispute obligations.

7. Age and international processing

This plugin is not directed to children under 13. Follow the host platform's applicable age requirements and obtain a parent or guardian's permission where required. If you believe a child has provided information inappropriately, contact us so we can investigate.

We operate from the United States. Our providers may process and store information in the United States and other countries whose privacy laws differ from those where you live.

8. Changes and contact

We may update this policy by posting a revised version with a new effective date and provide additional notice of material changes where required. For privacy questions or requests, contact Work in Play LLC at support@cognitivecatprep.com.