Privacy notice

What we collect

We may store account contact details, a student’s first name and year level when a parent provides them, practice responses, scores, progress, writing submissions, optional-email preferences, and messages sent through Contact or Help & feedback. Public contact submissions include the name and reply email supplied, along with a one-way identifier used to prevent spam. To understand whether the product works, we also record page paths and a small set of funnel actions with a random browser identifier in first-party storage. Where present, we retain campaign tags or the referring website’s hostname. Google Ads may also receive basic visit and advertising-attribution data through its site tag. This analytics data does not include student answers, scores, names or email addresses.

How we use it

We use this information to provide practice, save progress, produce parent-facing guidance, respond to support requests, maintain security, improve the product, measure advertising, and send updates only where consent has been given. When checkout begins, the random analytics identifier and limited campaign attribution may be included in Stripe checkout metadata so a successful purchase can be attributed to its first-touch source. Specialist service providers, including Google for advertising measurement and our email-delivery provider for support messages, process limited data on our behalf. We do not sell personal information.

Optional emails

Practice reminders and preparation tips, news and offers are separate choices. Creating an account or confirming your email does not subscribe you. If you choose practice reminders, we may use whether practice has been started or submitted to choose a useful message. We do not include your child’s name, answers or scores in these emails.

Parents can change these choices in Email preferences or use the unsubscribe link in an optional email without signing in. We keep a record of the choices made and a minimal unsubscribe record, including the email address, so that deleting and recreating an account does not accidentally subscribe it again. Essential account and service emails are separate. Contact us if you have questions about these records or want to request deletion.

Account security

We send account confirmation and recovery emails when needed. Authentication forms may also use Cloudflare Turnstile to help reduce automated abuse. When enabled, Cloudflare processes browser and network information for this security check under its privacy policy. We do not include student answers or scores in these checks.

Control and contact

A parent or guardian can ask to access, correct or delete account information and support messages through the contact page. Product-update consent can be withdrawn at any time.