Privacy Policy

Account data

If you create an account, we store your email address and a bcrypt-hashed password (never the password itself). If you enable two-factor authentication, we store the TOTP secret needed to verify your codes. We use a session cookie (JWT-based) to keep you signed in — this is required for the site to function and isn't optional.

Practice activity

We record which questions you answer, whether each answer was correct, and your resulting scores, so results and progress can be shown to you. If you practise without an account, this is linked to an anonymous cookie-based identifier rather than your identity; if you later sign up, those anonymous attempts are attached to your new account.

Payments

If you purchase premium access, payment is handled entirely by Stripe — we never see or store your card details. We keep a record of the purchase itself (product, amount, date) to grant access and for support/refund purposes.

Advertising

Where enabled, this site shows ads served by Google AdSense. Google may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising by visiting Google Ads Settings. The cookie banner on this site lets you decline ad personalization before any ad script loads.

Separately, some ad placements may show ads sold directly to advertisers through our own system rather than Google — those don't set third-party cookies, only a basic view/click count tied to the ad itself, not to you personally.

AI tutor

If you use the AI tutor chat widget, the text of your question and relevant exam/topic context is sent to Anthropic's API to generate a response. We don't send your account identity or practice history as part of that request.

External news feed

The driving/licensing news shown on the homepage is fetched server-side from public RSS/Atom feeds (e.g. RNZ, GOV.UK). This fetch happens on our server, not your browser — those third parties don't receive any information about you from this integration.

Cookies in use

• Session cookie — required, keeps you signed in.
• Anonymous practice-attempt cookie — required for free practice to work without an account.
• Ad personalization cookies (Google AdSense) — optional, only set after you accept via the cookie banner.

Your choices

You can change your ad-personalization choice at any time below, or via your browser's cookie settings. To request deletion of your account and associated data, contact us using the details below.

Contact

Questions about this policy or your data can be sent to the site operator via the contact details on the homepage.