Privacy Policy

If you only take the free check: your answers and score, and — at the halfway point — your email address, which is what unlocks the second half and your report.

If you subscribe: the above, plus your name, your account credentials, and your study activity — which questions you answered, how you scored, which domains you are weak in. Each practice exam you finish is saved with its date and score, so you can return to past attempts and see your progress. That activity is the product; without it there is no weakness map.

When you sign in: your IP address and your browser’s user-agent string, stored with the session itself. It is how a session can be recognised and revoked, and it is deleted when the session is.

We never see your card. Payments are handled by our payment provider acting as merchant of record. They send us a confirmation that a plan is active and a masked last-four; the card number never reaches our systems.

An exam attempt in progress is stored in your browser, not on our servers. The SQL proof cells execute entirely in your browser using an embedded database engine — the queries you write and run, including any you edit, are never transmitted to us.

To provide the service you asked for and to bill you for it (contract); to keep the service working and secure (legitimate interests); and to email you about your own results — the report you requested and a short study plan that follows it (legitimate interest in following up the check you asked for). Every email we send carries an unsubscribe link, and using it ends the emails for good.

Only the processors we need to run the service: Vercel (hosting), Neon (the database), Paddle (payments, as merchant of record), Resend (email), and PostHog on its EU cloud (product analytics). Each one gets only what its job requires. We do not sell personal data, and we do not share it for advertising.

Account and study data for as long as your account exists, and for 12 months after you close it so you can come back to your history. Billing records for as long as tax law requires. Free-check results without an account: 90 days.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it — email privacy@examprotocol.com and we will action it within 30 days. Deleting your account deletes your study history; that cannot be undone.

We record how people use the website, so we can see where the product is confusing and fix it. A recording shows every page you opened, where you moved and clicked, the practice questions you answered, and the text you typed into the website. It is a picture of the screen, not a video of you: we use no camera and no microphone. Two things are never recorded. Your sign-in code is never recorded, because it is the key to your account. Your card details are never recorded, because you type them on the payment page of Paddle and that page is not part of our website. If you are signed in, we connect the recording to your account, so we can see how one person uses the product over time. Recordings are stored by PostHog on its European cloud, and we delete them after 30 days.

One cookie keeps you signed in. Beyond that we measure which pages work, and what that means depends on where you are. In the European Economic Area and the United Kingdom we ask first: accept and we measure fully, including the session recording described above; refuse and we still count the visit, but we store nothing on your device, we record nothing, and we do not connect the visit to your account. Everywhere else, measurement is on by default. Either way: no advertising cookies, no cross-site tracking, and we never sell your data or share it for advertising. If you were asked, you can change your analytics choice at any time.