Privacy Policy
What we collect, why, and how to make us delete it. We sell nothing to anyone.
What we collect
If you only take the free check: your answers and score, and — at the halfway point — your email address, which is what unlocks the second half and your report.
If you subscribe: the above, plus your name, your account credentials, and your study activity — which questions you answered, how you scored, which domains you are weak in. Each practice exam you finish is saved with its date and score, so you can return to past attempts and see your progress. That activity is the product; without it there is no weakness map.
When you sign in: your IP address and your browser’s user-agent string, stored with the session itself. It is how a session can be recognised and revoked, and it is deleted when the session is.
We never see your card. Payments are handled by our payment provider acting as merchant of record. They send us a confirmation that a plan is active and a masked last-four; the card number never reaches our systems.
What stays in your browser
An exam attempt in progress is stored in your browser, not on our servers. The SQL proof cells execute entirely in your browser using an embedded database engine — the queries you write and run, including any you edit, are never transmitted to us.
Why we process it
To provide the service you asked for and to bill you for it (contract); to keep the service working and secure (legitimate interests); and, for product emails you opted into, your consent. You can withdraw consent at any time from any email we send.
Who else touches it
Only the processors we need to run the service: Vercel (hosting), Neon (the database), Paddle (payments, as merchant of record), Resend (email), and PostHog on its EU cloud (product analytics). Each one gets only what its job requires. We do not sell personal data, and we do not share it for advertising.
How long we keep it
Account and study data for as long as your account exists, and for 12 months after you close it so you can come back to your history. Billing records for as long as tax law requires. Free-check results without an account: 90 days.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it — email privacy@examprotocol.com and we will action it within 30 days. Deleting your account deletes your study history; that cannot be undone.
Cookies
One cookie keeps you signed in. Beyond that we measure which pages work, and what that means depends on where you are. In the EEA and the UK we ask first: accept and we remember you between visits; refuse and we still count the visit but store nothing on your device. Everywhere else, measurement is on by default. Either way: no advertising cookies, no cross-site tracking, no third-party profiling, no session recording, and no automatic capture of what you click or type. If you were asked, you can at any time.