Privacy

Information and providers

Project Exam Lab uses account identifiers, verified email and optional name; study responses, scores, timings and question versions; purchase, acceptance, billing address/tax and access records; support/refund messages and contact details; and email content/delivery information to operate the service, respond to requests and protect accounts.

With your permission, we use approved campaign labels and basic visit, sample and purchase events to understand how campaigns relate to purchases. Analytics records exclude names, email addresses, IP addresses and practice answers; account and order links support verified privacy requests.

Cloudflare hosts the website/database; Auth0 provides sign-in; PayPal processes payments; Gmail handles support; Resend handles transactional email when enabled. We use service providers, including AI services, to review support requests and prepare replies. Each receives information needed for its service and may process it internationally under its own privacy and retention practices. We do not receive account passwords, card numbers or bank-account numbers.

Cookies and tracking

Sign-in cookies and browser storage support account and practice features. Sign-out does not erase local practice records; clearing browser storage does not delete account records. Hosting, sign-in and payment providers may collect device, connection and security information under their own practices, including across their services.

Optional analytics is off until you choose Allow in Analytics preferences. A first-party visit cookie lasts up to eight hours; your choice is remembered for up to 180 days. You can withdraw there. Global Privacy Control and Do Not Track signals turn optional analytics off.

Retention

Account and study records remain while your account is open; eligible records are deleted after verified closure. Purchase expiry does not delete history. We explain effects on active access and refunds before closure.

Essential purchase, refund and tax evidence is kept seven years after the transaction year, longer for unresolved legal, tax or payment matters. Routine support records are kept two years after resolution. Duplicate application-held email content is eligible for removal 90 days after confirmed delivery or final resolution; necessary financial and delivery evidence follows its applicable period.

Optional journey records become eligible for removal 90 days after the journey begins; purchase-source labels become eligible 90 days after recording. Turning analytics off removes this browser’s current journey records. Records linked to your account are deleted after verified closure.

Cleanup follows regular manual review, rather than automatic expiry. Provider records/backups follow provider practices; device records remain until you clear browser storage.

Requests and changes

For access, correction, export, deletion or privacy questions, email projectexamlab.customersupport@gmail.com from your account email. We verify ownership without requesting your password. Applicable rights and exceptions depend on law.

The service is for adults and is not directed to children under 13. Contact us about suspected collection from a child so we can investigate. Material notice changes are posted here with a revised effective date.