Privacy policy

João Vitral, who runs PrepCivic, is the controller of your personal data. Contact: [email protected].

Email address: to sign you in, deliver your access and send your receipt (contract).

Your answers, scores and progress: to run the practice tests, the review of mistakes and your readiness (contract).

Order details (amount, currency, status, the date you accepted the terms): for billing, refunds and proof of acceptance (contract and legal obligation).

A random visitor ID for the free practice test: to keep your free test without an account (strictly necessary cookie).

Browsing data in Google Analytics: to understand how the site is used, only if you accept (consent).

Reminder emails: only if you opt in (consent). Every email has an unsubscribe link.

We do not collect your name, nationality, immigration status, documents or test date. Card and address details stay with the payment provider.

We use necessary cookies to make the site work. Analytics cookies are only set after you accept them in the banner. You can change your choice at any time with "Cookie settings" in the footer. Details on the Cookies page.

Paddle (payments; for tax and receipts it is an independent controller), Brevo (email), Sentry (error reports, without personal data), Google Analytics 4 (only with consent), Cloudflare (network and encrypted backups) and Hostinger (server).

Some of these providers are outside the UK and the EU. Transfers rely on each provider's standard contractual clauses.

Account and progress: until you delete your account, or after 24 months without signing in. Sign-in links: 24 hours. Orders: kept for the tax period, with the email replaced by a one-way code when you delete your account. Server logs and backups: 30 days.

You can download your data ("Download my data" in your account), delete your account ("Delete my account"), ask us to correct your email, and withdraw consent at any time. Write to [email protected]; we reply within 15 days.

You can also complain to a data protection authority: the ICO in the UK, CNIL in France, your state authority in Germany, or the ANPD in Brazil.

Data is sent over HTTPS, sign-in tokens are stored only as hashes, and backups are encrypted.

The service is for adults aged 18 or over.

We will show the date of the last change at the top of this page and tell account holders by email about important changes.