Privacy Policy

1. Data We Collect

We collect: email address, name (optional), exam scores, answer history, confidence ratings, and basic usage data (pages visited, exam sessions). If you sign in with Google, we receive your Google profile name and email.

2. How We Use Your Data

Your data is used to: provide the exam simulation service, track your progress and domain scores, send password reset emails, and improve the platform. We do not sell your data to third parties.

3. Data Security

Passwords are hashed using bcrypt. Data is transmitted over HTTPS. Access tokens expire after 15 minutes. We follow industry-standard security practices to protect your information.

4. Third-Party Services

We use Google OAuth for optional sign-in. When you sign in with Google, Google shares your name and email with us. We do not access your Google contacts, calendar, or other data. No other third-party services have access to your personal data.

5. Your Rights

You have the right to: access your personal data, correct inaccurate data, request deletion of your account and data, and export your exam history. Contact us to exercise these rights.

6. Cookies

We use a minimal authentication cookie (pmp_auth) to detect logged-in status for page rendering. We use localStorage for session state. We do not use tracking cookies or third-party analytics cookies.

7. Data Retention

Your account data is retained as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Anonymized aggregate data (question statistics) may be retained indefinitely.

8. Contact

For privacy-related questions, use our support page.