Toe Board
My courseAsk Kick AIFree practice checksCHSTCoursesCHST courseGuidesAll guidesThe CHST exam outline: four domains and their weightsOSHA fall protection (Subpart M) for the CHSTOSHA excavations (Subpart P) for the CHSTOSHA scaffolds (Subpart L) for the CHSTOSHA electrical (Subpart K) for the CHSTOSHA cranes and derricks (Subpart CC) for the CHSTOSHA ladders and stairways (Subpart X) for the CHSTOSHA confined spaces (Subpart AA) for the CHSTOSHA health hazards: silica, lead and noise for the CHSTOSHA recordkeeping (Part 1904) for the CHSTCHST exam cost, fees and schedulingCHST eligibility: the experience BCSP asks forCHST exam results, retakes and renewalFree CHST practice test with explained answersCHST study guide: a six-week plan by domainCHST vs CSP vs ASP: which BCSP exam?Toe BoardCompare study optionsFor employersThe appAbout and editorial policy

Privacy

This page describes how Toe Board handles information when you take the free check, buy a course and study with it.

Who operates this site

Nori Software LLC, New Jersey. Contact: hello@toeboardprep.com.

Information you provide and how we use it

  • Email: when you share it with us, we link it to your results, your study plan or your order. We email the results or study plan you asked for, and an order receives a receipt email with the link to your course. If you leave "Email me study tips and offers" ticked, we also send a few study tips and course offers. Untick it to get only the email you asked for. Every email has an unsubscribe link.
  • Exam month: we use the month you choose, or your answer that you are unsure, to build your study plan.
  • Employer-pays answer: we record whether you say your employer will pay, will not pay, or you are unsure.
  • Free check answers: we process your answers to calculate your score and domain breakdown. The saved attempt includes your results.
  • Course activity: we save your practice and timed-exam answers and scores, so your progress and domain scores work and we can apply the refund terms.
  • Study assistant chats: if you use the study assistant, we store your chats for 30 days to run and improve the feature. We send no name or email to the AI provider.
  • Pass report: if you tell us you passed, we save your score and whether you agreed to let us quote it.
  • Payments: Stripe processes payment at checkout. We receive your email, the plan you bought and the payment status, never your full card number.
  • UTM and attribution data: we record how you reached the site, including campaign tags, landing page, browser user agent and click identifiers when present (we don't store your IP address). We also record the domain of the site that sent you here (for example google.com, never the full address) and the path of the first page you opened on this site (for example /guides/ followed by a page name), with no query string: nothing after a "?" or "#" in the address is kept. That first visit stays on record in your browser until a later visit arrives with new campaign tags (UTMs) from outside this site, which replaces it and starts a new first visit. Links between our own pages, and a later visit that brings only a new click identifier, do not replace it. Attribution is also kept in your browser's local storage and linked to your check results and orders.
  • Visitor ID: a first-party cookie named ek_vid with a random ID that lasts 180 days. We record it only with plans page views, plan button presses, checkout starts and orders, to see how visits reach checkout. It is never sent to Google, Meta or any other ad platform. With Global Privacy Control on, or after you opt out on Your privacy choices, we remove it and don't set one.

Hosting and storage

We use Discord to send our team internal notifications about orders and sign-ups, and Resend to send receipts and the emails you ask for.

Vercel hosts the site. Our production application records are stored in a Postgres database on Neon.

Traffic and performance measurement

On the public production site, we load cookieless Vercel Web Analytics for page views and Vercel Speed Insights for page performance. Our measurement filter removes URL query strings and fragments, replaces individual result identifiers with a shared path, and excludes marked QA browsers and automated browsers.

These measurements run separately from the Google tags described below.

Ad tracking choices

We use Google Analytics and the Google Ads tag to count visits and to see whether an ad led to a free check, an email sign-up, a checkout start or a purchase. They load in your browser with Google signals and enhanced conversions turned off. In the EEA and the UK they start with ad and analytics storage denied, and the Meta pixel does not load there or in EU territories. We may also use Google Analytics lists of visitors who finished the free check to show our Google ads to people who haven't bought yet.

We use the Meta pixel and Meta's Conversions API for the same purposes on Facebook and Instagram. When you use the site (for example view a page, start or finish the free check, leave your email, start checkout, buy, or tell us you passed), Meta receives the event name and its details: the exam and site, your free check score, weakest topic and time taken, your exam month and employer-pays answer, the plan and price you chose, or the pass score you reported. Meta also receives the page you landed on (without anything after a "?"), campaign tags from ad clicks, which version of a page you saw, your browser user agent and IP address, the Meta browser cookie and click identifier when present, and a hashed (scrambled) copy of your email if you gave one. Our server passes your IP address to Meta only at that moment and doesn't store it. The Meta pixel doesn't load on pages whose address carries an order link. Meta uses this to measure our ads and to show our ads to people who finished the check and haven't bought.

To opt out, use Your privacy choices, linked in every page footer, or turn on Global Privacy Control in your browser. Either one stops the Google tags and the Meta pixel from loading on this site in that browser, and stops our server from sending your events to Google or Meta.

Request deletion

Email hello@toeboardprep.com from the address you used with us and ask us to delete your records. Include the exam name and, if available, a check result or order reference so we can locate them. Please do not send passwords or payment-card details.