Privacy
Privacy: no cookies, no accounts, one logged button
Runbook Seven, a free SSCP (Systems Security Certified Practitioner) practice site, sets no cookies, runs no analytics and has no accounts; the only thing it records is a press of a “Get the app” button.
What the pages themselves collect
Nothing beyond what any web server needs to deliver a page. The site loads no analytics, advertising or social scripts, no tracking pixels, and no fonts or scripts from other companies: all 12 pages, from the SSCP overview to this one, are served from this domain alone. There is no sign-up, no newsletter and no comment box, so the site never asks for your name or e-mail address.
Your practice answers stay in the open page
The 60-item practice log and the samples on other pages run entirely in your browser. Your picks, the tally and the pace meter exist only in the open tab. Nothing is sent to a server, nothing is written to cookies or browser storage, and closing or reloading the page erases it. Restart erases it sooner.
The one thing that is logged: Get the app
Every “Get the app” button points to a short redirect address on the go. subdomain of this site, not straight to the App Store. When you press one, that server records the press and sends you on: on an iPhone or iPad straight to the App Store listing of the SSCP practice app; on an Android phone (there is no Android app) straight to this site’s free practice questions; on a computer or any other device to a one-screen page on the same go. address with an App Store badge and a link to the free practice questions. A press on that page’s badge or link is recorded the same way. The record holds:
- Page and button
- which page the press came from, the referring address, and where on the page the button sits
- Where you were sent
- App Store, the free practice questions or the go. page, plus whether the press came from that page
- Operating system
- iOS, Android or something else, taken from the user agent
- User agent
- the identification string your browser sends with every request
- IP address
- the network address the request came from
- Coarse location
- country, region, city and time zone, plus the network provider and the data centre that answered, derived from the IP address — never from your device’s location services
- Campaign tags
- any utm_ labels carried in the link
The log exists to count app clicks and compare which pages send them. It is written server to server after the redirect has been answered, and it places no cookie or identifier on your device. After the hand-off, the App Store’s own privacy terms apply, not this page.
What the site does not do
- Set cookies, first-party or third-party.
- Run analytics, heatmaps or session recording.
- Load advertising or third-party trackers.
- Ask for an account, a name or an e-mail address.
- Keep your practice answers after the page closes.
This page describes the site as of October 2026. Questions about it go through the route on the contact page.