Privacy

We collect the minimum needed to run a training product, and we don't sell it. Ever.

What we store

• Account data: email, display name, preferred language, time zone, and the age bracket from our old settings page if you ever filled it in. We no longer ask for or use that bracket; it is in your export and goes when you delete your account.
• Your age band, only if you choose to give it after a test. It never changes your score. It is stored with that test and reused for your later tests for up to a year. We use it to present results properly for under-16s, who see their score on an adult scale with no percentile and a link to change the answer if it's wrong, and, across everyone, to see how results vary with age.
• Learning data: your answers, timings, scores, plan progress, streaks, spaced-review cards, and any certificates you generate — this is the product.
• Anonymous guest results, linked to a random cookie until you create an account and claim them.
• Service logs: requests and errors, kept for 7 days so we can keep the site running. Our hosting provider also keeps standard web-server logs.

What we don't do

• No analytics beacons, and no advertising measurement unless you accept it (below). Our other cookies are essential ones: sign-in, your guest test, form security, one-off notices, your cookie choice and, if you tell us you're under 16, a marker that keeps advertising off. Your theme and read-aloud speed stay in your browser's own storage and are never sent to us.
• No selling of personal data. We share it only with the services that run the site (hosting and email delivery) and, only if you accept its pixel, with Meta.

Advertising measurement, only if you accept

If you press Accept in the cookie banner, Meta's advertising pixel runs on our public pages (home, about, FAQ, methodology and the free test's start page) and on the pages that confirm a new account or a sent message. It also runs on a finished free test's result page, only to count that the test was finished, and stops there once it has.

It sends Meta the address of the page (with any ad-click or campaign tags in it), our site's address as the page you came from, your browser's details and IP address, Meta's cookies, and a page view and, where it applies, one of these: a finished free test, a new account or a sent message. It never sends your answers, your score, your age band, your name, your email or anything you type, and it never runs while you answer a test, in your signed-in account, on sign-in or registration forms, certificate pages or shared results.

We use it to measure our ads. Meta may also use what it receives for its own purposes, including showing you ads, and if you use Facebook or Instagram it can link the visit to that account. The legal basis is your consent. We and Meta Platforms Ireland are jointly responsible for collecting and sending the data; what Meta does with it afterwards, which can include transferring it to the United States, is Meta's responsibility under its own privacy policy. You can also limit ads based on your activity in Meta's ad preferences, or at youronlinechoices.eu or optout.aboutads.info.

It never runs for anyone who has told us they are under 16: that answer switches it off and deletes Meta's cookies on this site, in the browser where it was given and in any browser where that account signs in. Press Reject, or change your mind later with "Cookie settings" at the foot of our public pages; rejecting changes nothing else on the site.

Your controls

From Settings you can export your data as JSON: every record we hold about you — profile, tests, answers, plan, drills, streaks, certificates. It excludes your sign-in secrets (your password is stored only as a hash and is never exported) and the shared question and lesson content, which is identical for everyone and says nothing about you.

You can also delete your account from Settings. Deletion removes your personal data immediately; anonymized answer statistics (which contain nothing about you) remain in item-calibration aggregates. It runs as one all-or-nothing operation: if any part fails, nothing is deleted and we say so rather than reporting success.

Email

We send account emails (confirmation, password reset). Product updates are opt-in only.