The short version
You can use the free 20-question sample with no account and no personal data at all. If you create an account we store your email, what you bought, and your practice scores. We do not sell your data, we do not run advertising trackers, and we never see your card details. Email support@pmp-exam-test.com to get a copy of your data or have it deleted.
1. What we collect
- Account data — your email address and authentication metadata, held by Supabase Auth. If you sign in with a one-time link or a third-party provider, we receive the identifier that provider returns.
- Purchase records — which pass you bought, when your access expires, and the customer and transaction identifiers issued by Paddle. We never receive or store your card number.
- Practice history — for each finished session: the mode, a label, how many questions were drawn, attempted and correct, elapsed time, and a per-domain score breakdown. This powers your progress panel. It records aggregate scores only — not which questions you saw or how you answered any individual one.
- Technical data — your IP address and a timestamp for each API request, used solely for rate limiting and abuse prevention, plus payment-provider event identifiers kept for 24 hours so a repeated webhook cannot be processed twice.
We do not use advertising cookies or third-party analytics trackers. The cookies we set are the ones needed to keep you signed in and to carry your quiz session.
2. Why we process it, and on what basis
- To provide the Service — signing you in, unlocking the content you paid for, and showing your progress. Basis: performance of our contract with you.
- To take payment and handle refunds. Basis: performance of our contract, and our legal obligation to keep transaction records.
- To keep the Service up — rate limiting, fraud and abuse prevention, and preventing duplicate payment events. Basis: our legitimate interest in a secure, working service.
- To answer your emails. Basis: our legitimate interest in supporting our users.
We do not use your data to train machine-learning models, and we do not sell it.
3. Who else processes it
- Paddle.com Market Ltd — our Merchant of Record. Paddle is the seller for your purchase and processes your payment details and billing address directly; we receive only the outcome and the identifiers. See Paddle's privacy notice.
- Supabase — authentication and database hosting. See Supabase's privacy policy.
- Vercel — application hosting and delivery. See Vercel's privacy policy.
These providers operate internationally, so your data may be processed outside your country under the safeguards in their own agreements. We disclose data otherwise only where the law requires it.
4. How long we keep it
- Account, purchase and practice data — for as long as your account exists. Delete your account and it goes with it.
- Rate-limiting records — a short rolling window; old rows are discarded automatically.
- Payment-event identifiers — 24 hours.
- Transaction records — retained by Paddle for as long as tax and accounting law requires, independently of your account.
5. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to processing based on legitimate interests. To exercise any of these, email support@pmp-exam-test.com from the address on your account. We aim to respond within three business days and to complete requests within 30 days.
Deleting your account removes your account record, your purchase grants and your practice history. Note that deletion ends any remaining access you have paid for, and is not itself a refund request — see the refund policy. If you believe we have mishandled your data, you may complain to your local data-protection authority.
6. Children
The Service is intended for adults preparing for a professional certification. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.
7. Who is responsible, changes, and contact
The data controller for the personal data described above — the party that decides why and how it is processed, and the one you exercise the rights in section 5 against — is Stefan Greeff.
If we change this policy we will update the date at the top of this page; material changes will be announced in the app. Questions, requests or complaints: support@pmp-exam-test.com.