Privacy Policy
Last updated: January 2026
1. Data Controller
trymockielts.com ("we", "our", or "us") is the data controller responsible for your personal data. If you have questions about how we handle your data, please contact us.
2. Data We Collect
Account Data
- Email address
- Display name (if provided)
- Password (encrypted, never stored in plain text)
- Account creation date
Usage Data
- Test scores and results
- Practice session history
- Progress tracking data
- Time spent on the platform
Technical Data
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and interactions
Device Fingerprinting
We use device fingerprinting technology to prevent abuse and protect our platform from fraudulent activity. This technology creates a unique identifier based on your device's characteristics (such as browser settings, installed fonts, and screen resolution).
Important: The fingerprint is stored as a one-way cryptographic hash. This means:
- We cannot reverse the hash to identify you personally
- It cannot be linked to your identity across other websites
- It is only used for security purposes (preventing multi-account abuse)
We rely on our legitimate interest in preventing fraud and abuse as the legal basis for this processing under GDPR Article 6(1)(f).
Cookies and Tracking
We use cookies and similar technologies. See Section 6 for details about the types of cookies we use.
3. How We Use Your Data
- Provide our service: Create and manage your account, save your progress, display your scores
- Improve the platform: Analyze usage patterns to enhance our content and features
- Communicate with you: Send service updates, respond to inquiries
- Display advertisements: Show personalized ads through Google AdSense
- Ensure security: Detect and prevent fraud or abuse
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds:
- Consent: For cookies, marketing communications, and personalized advertising. You can withdraw consent at any time.
- Contract: To provide our service when you create an account and use our platform.
- Legitimate Interest: For analytics to improve our service, security measures, and fraud prevention.
5. Third-Party Services
We share data with the following third-party services:
Google AdSense
We use Google AdSense to display advertisements. Google may use cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.
Google Analytics
We may use Google Analytics to understand how users interact with our website. Google Analytics uses cookies to collect anonymous data about page views, session duration, and user demographics.
Firebase (Google Cloud)
We use Firebase for authentication and data storage. Your account data and progress are stored securely in Firebase. See Firebase Privacy Policy.
6. Cookies
We use the following types of cookies:
Essential Cookies
Required for the website to function. These include authentication cookies to keep you logged in and session cookies.
Analytics Cookies
Help us understand how visitors use our website. We use this data to improve our content and user experience.
Advertising Cookies
Used by Google AdSense to display relevant advertisements. These cookies may track your browsing activity across websites.
You can manage cookie preferences through our cookie consent banner or your browser settings. Note that disabling certain cookies may affect website functionality.
7. Your Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Restrict Processing: Limit how we use your data
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw previously given consent at any time
- Right to Lodge a Complaint: File a complaint with your local data protection authority
To exercise these rights, please contact us. We will respond within 30 days.
8. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:
- Account data: Retained until you delete your account
- Test results: Retained for the lifetime of your account
- Analytics data: Anonymized and aggregated after 26 months
If you delete your account, we will delete or anonymize your personal data within 30 days, except where required by law.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States (where Firebase and Google services are hosted). These countries may have different data protection laws.
When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (HTTPS)
- Secure authentication through Firebase
- Regular security assessments
- Limited access to personal data
11. Children's Privacy
Our service is not directed at children under 13 years of age (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately, and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting a notice on our website
- Updating the "Last updated" date at the top
- Sending an email (for significant changes)
We encourage you to review this policy periodically.
13. Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your data, please contact us.