Privacy: what a visit leaves behind

• Zero cookies; nothing is written to local or session storage.
• No sign-up, comment box, mailing list or form of any kind.
• No ad slots, tag managers, pixels, share buttons or analytics libraries.
• Practice answers are checked by code embedded in the page. Your picks travel nowhere and disappear when you close it.
• One log line per outside arrival, written on our side, used to tally which channels send readers.

A short script of ours, running on Cloudflare's network in front of these pages, decides whether to log. It considers only page requests made to newlycertified.com itself, and logs one when any of three things holds:

1. the Referer header names a different site: a search engine results page, a chatbot answer with a link, a Reddit thread;
2. a utm_source parameter is present in the URL;
3. the requesting software identifies itself as one of a short list of AI assistants that open pages on a user's behalf, or as a crawler that indexes pages for AI search. Model-training scrapers such as GPTBot or CCBot are deliberately not on that list.

Clicks from one Newly Certified page to the next are not logged, and neither is an address typed by hand, a bookmark that carries no Referer, or a page Chrome or Safari loads early in the background. Requests for images, fonts, style sheets or a missing page never produce a line.

• the page path, plus the Referer header unchanged;
• the campaign tags utm_campaign, utm_medium and utm_source when the link had them;
• a flag saying person or AI tool, with the tool's name in the second case;
• your IP address, its ASN (the numbered network that announces it) with that network's name, and the city, region and country Cloudflare infers for it;
• the User-Agent header as received.

The line is posted to a statistics server we run ourselves, and only once your page is already on its way, so it never holds the page up or alters a byte of it. Its single purpose is a running count of readers arriving through search, through AI tools and through links elsewhere on the web.

Many pages link to NCC, DANB or BCSP documents, a few to copies of them hosted by ASSP or the Internet Archive, and one to OSHA. Every HTML response here sets a no-referrer-when-downgrade policy. In practice, clicking through to an https site hands that site the complete Newly Certified URL you clicked from, path and all. Nothing beyond that address comes from us, and what the other site does next falls under its own privacy terms.

Pages are delivered by Cloudflare, which also filters attacks and abusive traffic before it reaches them. Cloudflare describes what it does with request data in its own privacy policy.

Everything above matches the logging in place on the update date printed on this page. There is no privacy mailbox, for the reason given on the contact page.