Legal

Privacy Policy

Last updated: 6 November 2026

TODO for the owner: this is placeholder text. Fill in the company details in src/config.ts → SITE.company, have it checked by a lawyer, and align it with your Paddle account before launch.

Short version: we collect as little as possible. You do not need an account, and your practice progress stays in your own browser.

1. Data stored on your device

  • Practice progress and mock results are saved in your browser’s local storage. They never leave your device.
  • Your Pass is saved in local storage as a signed token (test, expiry date, transaction id).
  • Your theme choice (light or dark) is saved in local storage.

You can delete all of this at any time by clearing your browser’s site data.

2. Purchases

Payments are processed by Paddle.com, our merchant of record. Paddle collects your name, email, billing country and payment details under its ownprivacy policy. We receive the transaction id, the test you bought and the order details needed to activate your Pass and handle refunds. We never see your card number.

3. Analytics

We use privacy-friendly, cookie-free analytics (Cloudflare Web Analytics) to count page views. It does not track you across sites or build a profile.TODO: update if other analytics are added.

4. Hosting

The site is hosted by Cloudflare. Like every web server, it processes your IP address to deliver pages and protect against abuse.

5. Legal basis and retention (GDPR)

We process purchase data to perform our contract with you (Art. 6(1)(b) GDPR) and to meet tax and accounting obligations (Art. 6(1)(c)). Purchase records are kept as long as the law requires. TODO: confirm retention periods.

6. Your rights

You can ask for access to, correction or deletion of personal data we hold, and object to or restrict processing. You can also complain to your data protection authority. Email us at support@example.com.

7. Cookies

We do not use advertising or tracking cookies. Paddle’s checkout may set strictly necessary cookies to complete a payment.

Contact

CitizenPrep is operated by [Company name], [Street, postcode, city, country]. Registration: [Chamber of Commerce / registration number]. VAT: [VAT number].
Email: support@example.com