How Secure Is My Personal Information on This Site?
The most reassuring fact about your data here is what CertFun never receives: your card and bank details do not reach the site at all. Paying for Premium sends them straight to the payment gateway that runs the charge, so the numbers most worth guarding are settled on the gateway’s side and never land in your CertFun record. What the site does keep is a short, unremarkable set — your email and the basic account details you filled in at sign-up, and little else. Whichever of the twenty-odd vendors’ exams you signed up for, that same small record is all there is.
That is deliberately a description rather than a slogan. CertFun does not stamp a percentage of safety on the page, nor claim a particular seal or standard it would want you to take on faith — a claim you cannot check is worth less than a plain account of what is and is not held. This answer names the data instead: where the sensitive part goes, and how little of the rest there is.
Why Your Card Never Reaches CertFun
The split is the whole point. When you buy Premium, the checkout passes your card and bank details to the gateway; the charge is taken there, and CertFun is told only that it cleared, not the card number itself. Which cards and methods the gateway will take is covered in What Payment Methods Are Supported? What this means for your data is plain: the single most sensitive thing in any purchase is handled by a system built for it, and because the card number never enters CertFun in the first place, the site is not where it lives at all.
What CertFun Keeps for Your Certification Exam Account
Set the payment aside and the rest is short enough to list: your registration email, the username you log in with, the handful of account details you entered, and the record of your own practice — the exam you chose and the sittings you have taken on it. That is close to the whole of it. CertFun requests no identity papers and collects nothing that has no part to play; the certification exam you selected is there so the account opens the right practice, and the email is there to reach you and to carry a reset link when you ask for one. The record is short because the site needs little to do its work.
Held to the data itself, then, your footprint on CertFun is small and easy to check: the handful of account details and the email you gave at sign-up, the practice you have done, and no card or bank numbers — those stay with the payment gateway. There is no seal here to take on faith, just a boundary you can trace: the sensitive data with the gateway, a short record with CertFun. How the account is guarded at the door — your password and the one-at-a-time session — is the access side of the story, and it has its own answer under Is My Data Secure on CertFun?
