Privacy Policy

Overview

CreditPath is a free credit education site run by one person on a self-hosted server. There is no company behind it, no ad network, and no analytics trackers. This policy explains what information the site handles, why it is handled, and the choices you have.

CreditPath is an education and self-help tool. It is not a credit repair organization. You review, sign, and mail your own letters. The site never contacts credit bureaus, lenders, or debt collectors for you, and it does not promise any result.

Accounts Are Optional

You can read every lesson and use every tool without an account. If you want to save your progress or keep dispute letters on the server, you can create a free account. To do that, we ask for your name, your email address, and a password.

Passwords are never stored in a readable form, so no one, including our team, can see yours.

CreditPath is one of several free tools on toolstohelp.me, and a ToolsToHelp.Me account works the same way across all of them: one password gets you into CreditPath, the invoice generator, PDF tools, and the QR generator. When you sign in that way, CreditPath receives your central user id, your email address, your name, and whether that email has been verified. It uses them to find or create your CreditPath account and nothing else. Connecting an existing CreditPath account asks for that account's password first, so nobody else can claim it. You can still create and use a CreditPath account on its own, with no central account.

With an account, the site also stores what you do on it: which lessons you complete, quiz results, game scores, and badges you earn. That data exists so your dashboard works.

Dispute Letters and Sensitive Details

The dispute letter tool builds letters that can include personal details such as your name, mailing address, the last four digits of your Social Security number, and account numbers.

If you are signed in, you can choose to save a letter to the server. Saved letters are stored on our own protected server along with their status and dates. We treat this data as sensitive. It is used only to show you your own letters and to run the letter tracker, including deadline reminder emails that are sent automatically for bureau letters you save and mark as mailed (when the server has email configured). Deleting a letter stops its reminders. It is never sold, never shared with advertisers, and never given to anyone else unless the law requires it.

Using the Tools Without an Account

You can generate a dispute letter without signing in. In that case, everything you type stays in your browser. Nothing is sent to or stored on the server. When you close the page, that information is gone unless you copied or printed the letter yourself.

Cookies

CreditPath sets one cookie, called cp_session. It keeps you signed in. It is an httpOnly cookie, which means scripts on the page cannot read it. It is set when you sign in and removed when you sign out. If you do not sign out, it expires on its own after 7 days.

If you sign in with a ToolsToHelp.Me account, that login sets a second cookie for the whole site, called __Host-tthm_session. It is also httpOnly, and it is what keeps you signed in across the free tools on toolstohelp.me. CreditPath reads it in three places only: when it swaps a central session for a CreditPath one, when you connect an existing CreditPath account, and when it checks that a session it created that way is still good. Signing out of CreditPath clears both cookies.

That is the whole list. There are no tracking cookies, no advertising cookies, and no third-party cookies of any kind.

How We Use Your Information

Your information is used only to run CreditPath for you: signing you in, saving your progress, storing letters you choose to save, and sending service emails. Dispute-deadline reminders are sent automatically for bureau letters you save and mark as mailed, when the server has email configured. To stop reminders for a letter, delete the letter or record its response; deleting your account stops everything.

If you sign in with a ToolsToHelp.Me account, your name and email address come from that account. Nothing about your lessons, letters, or dispute details ever goes the other way. The other free tools on toolstohelp.me cannot see your CreditPath data.

Your email address is used for the service itself and nothing else. No marketing lists, no newsletters you did not ask for, no sharing with other companies.

What We Never Do

• We do not sell your data.
• We do not run ads or ad networks.
• We do not use analytics trackers.
• We do not share your information with anyone else, except when the law requires it (for example, a valid legal order).

How Your Data Is Stored and Protected

Your data is stored safely and securely on our own protected server, and connections to it use industry-standard encryption. Passwords are never stored in a readable form, so no one, including our team, can see yours. Your account is guarded by several layers of protection, and we never sell your information.

Saved letters are tied to your account, and the site only ever shows you your own.

No system is perfectly secure. Save to the server only what you are comfortable storing. You can always use the letter tool without saving anything.

Deleting Your Data

You are in control of what stays on the server.

• You can delete any saved letter at any time.
• You can delete your entire CreditPath account. Deleting it removes all of your CreditPath data from the database: your profile, lesson progress, quiz results, game scores, badges, and every saved letter. This happens right away.
• Deleting your CreditPath account does not delete your ToolsToHelp.Me account, and deleting the ToolsToHelp.Me account does not delete your CreditPath data. Each tool is deleted where it lives, so delete your CreditPath account here if you want that data gone too.
• Deleting your ToolsToHelp.Me account is not instant. For 30 days it is kept as a scrambled record, with your name and email removed, so that signing in again with the same email and password restores it. After 30 days the record is purged for good.

Saved letters also have an automatic retention limit, because they can hold sensitive details. A letter nobody has touched in about 23 months triggers a warning email (when the server has email configured), and a letter still untouched at 24 months is deleted for good. Opening a letter and saving a note resets its clock. Letters are never deleted without that emailed warning first.

Children

CreditPath is not aimed at children. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to This Policy

If this policy changes, we will update this page and change the effective date at the top. If a change meaningfully affects how saved data is handled, we will also post a notice on the site or email account holders before the change takes effect.

Contact

Questions about this policy or your data? Email [contact email].