Privacy Policy

1. Information We Collect

a. Information You Provide Directly

Account registration: Name and email address when you create an account.
Contact enquiries: Name, email address, and message content when you contact us via the contact form or email.
Study Tracker & Resources: Learning progress data, syllabus preferences, and saved resources you choose to store in the Platform.

b. Information Collected Automatically

Log data: IP address, browser type and version, operating system, referring URL, pages visited, and time/date of your visit.
Device information: Device type, screen resolution, and language preferences.
Cookies and similar technologies: As described in detail in Section 3 below.
Usage data: Interactions with practice elements, features used, and session duration, collected via Google Analytics.

2. How We Use Your Information

To create and manage your account and authenticate your sessions.
To provide, operate, and improve the Platform and its features.
To respond to your enquiries and support requests.
To analyse usage patterns and improve user experience via Google Analytics.
To display relevant advertisements through Google AdSense.
To send you important service-related communications (not marketing, unless you opt in).
To protect our legal rights and comply with applicable laws.
To detect and prevent fraudulent or abusive use of the Platform.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse traffic, and serve advertisements. Cookies are small text files stored on your device by your browser.

Types of Cookies We Use

Strictly Necessary Cookies: Required for the Platform to function (e.g., session authentication via Better-Auth). These cannot be disabled.
Functional / Preference Cookies: Store your preferences such as dark/light mode and Study Tracker settings (stored in localStorage).
Analytics Cookies: Used by Google Analytics (see Section 4) to collect anonymous usage data. These help us understand how visitors use the Platform.
Advertising Cookies: Used by Google AdSense and its partners (including the DoubleClick cookie) to serve personalised advertisements based on your browsing history on this and other websites (see Section 5).

Cookie Consent

When you first visit the Platform, a cookie consent banner is displayed before any non-essential cookies (analytics or advertising) are set on your device. You may:

Accept all cookies — enables analytics (Google Analytics) and personalised advertising (Google AdSense).
Reject all non-essential cookies — only strictly necessary cookies are set. Ads, if shown, will be non-personalised.

Your consent choice is stored in your browser and respected on all subsequent visits. You can change your preference at any time by clicking the "Cookie Settings" link in the footer.

Our consent banner is powered by Google Funding Choices, Google's own consent management platform. Google's handling of the consent data is governed by Google's Privacy Policy.

Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling cookies may affect the functionality of certain parts of the Platform. For more information, visit www.aboutcookies.org.

4. Google Analytics

We use Google Analytics (tracking ID: G-Z4H9RTYGS4) to analyse how visitors interact with the Platform. Google Analytics collects data such as pages visited, time spent, and general geographic location. This data is aggregated and anonymised — we cannot identify you personally from it.

Google Analytics uses cookies to collect this information. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. To learn how Google uses data from sites that use its services, visit Google's Privacy & Terms.

5. Google AdSense and Third-Party Advertising

We use Google AdSense to display advertisements on the Platform. Google AdSense is an advertising service provided by Google LLC. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites across the internet.

Google uses the DoubleClick cookie and other tracking technologies to serve ads based on your interests. These cookies allow Google and its partners to serve personalised ads to you when you visit our Platform and other websites.

We do not control the cookies placed by Google or its advertising partners.
Google may share data collected via AdSense with other Google services.
To learn more about how Google uses information from sites that use its advertising services, visit Google's Advertising Privacy Policy.
To read Google's full Privacy Policy, visit policies.google.com/privacy.

Opt Out of Personalised Advertising

You can opt out of personalised advertising served by Google and its partners at any time:

Visit Google Ad Settings to manage your Google advertising preferences.
Visit YourAdChoices (aboutads.info) to opt out of interest-based advertising from participating companies.
Visit the Network Advertising Initiative opt-out page.

Opting out of personalised ads does not mean you will stop seeing ads — it means the ads you see will be less relevant to your interests.

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Service providers: Third-party vendors that help operate the Platform, such as Vercel (hosting), Neon/Supabase (database hosting), Google Analytics, and Google AdSense. These providers are bound by contractual obligations to keep your information confidential.
Legal obligations: If required by law, court order, or governmental authority.
Business transfers: In connection with a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction.
Protection of rights: To enforce our Terms of Service, protect our rights, or prevent fraud or illegal activity.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

All Users

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your account and associated data.
Opt out of personalised advertising (see Section 5).
Manage cookies through your browser settings.

EU / EEA Users (GDPR)

Right of access (Article 15 GDPR).
Right to rectification (Article 16 GDPR).
Right to erasure / “right to be forgotten” (Article 17 GDPR).
Right to restriction of processing (Article 18 GDPR).
Right to data portability (Article 20 GDPR).
Right to object to processing (Article 21 GDPR).
Right to withdraw consent at any time where processing is based on consent.

California Residents (CCPA)

Right to know what personal information is collected, used, shared, or sold.
Right to delete personal information (with certain exceptions).
Right to opt out of the sale of personal information. (We do not sell personal information.)
Right to non-discrimination for exercising your CCPA rights.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Data Retention

Account data: Retained for as long as your account is active. You may delete your account at any time by contacting us.
Session data: Authentication sessions expire after 7 days of inactivity.
Analytics data: Google Analytics retains data for 26 months by default.
Contact enquiries: Retained for up to 12 months to allow us to follow up on your request.
LocalStorage data: Stored in your browser until you clear your browser data or uninstall the browser.

9. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted database connections, secure HTTPS transmission, and session-based authentication via Better-Auth.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

10. Third-Party Links

The Platform may contain links to external websites (e.g., blog references, tutorial resources, GitHub). We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.

11. Children's Privacy

The Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately at [email protected] so we can take appropriate action, including deleting the information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.