Website Privacy Policy
Last updated 7 September 2026
The short version. To study on this website you need an account, so we hold your email address, your study progress and whether you have paid. That is the whole list. We use Google Analytics to count page views, and in Europe, the UK and Switzerland we ask before it sets anything. There is no advertising, nothing is sold, and we never see your card.
Using the iPhone app instead? It has no accounts and stores nothing about you — see the app privacy policy.
What we collect, and why
- Your email address. It is how you sign in, how we can reach you about your account, and how a payment is matched to it.
- Your first name, if you enter one. Optional. It is only used to greet you.
- Your password, as a hash. Stored only as a PBKDF2-SHA256 hash with a random per-account salt. We cannot read your password and could not tell you what it is.
- The country you chose. It decides your question pool and your pass mark.
- Your study progress. Which questions you answered correctly, when, and your practice test scores. This is what the performance report is built from, and it is why your progress follows you to another device.
- Whether you have full access, with the payment reference for it.
Under UK and EU data protection law we process all of this to provide the account and the purchase you asked for, and — for rate limiting and abuse prevention — because we have a legitimate interest in keeping the service usable.
If you sign in with Google
We ask Google for the minimum that identifies a person: openid email profile. That returns your email address, your name and Google's own account identifier, which we store so we recognize you next time. We get no access to Gmail, Drive, Contacts, Calendar or anything else in your Google account, and we cannot post anything to it. You can revoke our access at any time in your Google account permissions.
Cookies
Two are strictly necessary, both first-party:
- pfc_session — keeps you signed in for 30 days. It holds a random identifier and nothing about you.
- pfc_oauth — exists for ten minutes during a Google sign-in, to protect that sign-in from being forged.
One is not necessary, and that is Google Analytics:
- _ga and _ga_* — set by Google Analytics to tell repeat visits apart. They do not identify you by name and they are not linked to your account.
Google Analytics, and your choice about it
We use Google Analytics to see which pages people actually find useful — how many visits a page gets, roughly where in the world it was read, and which page people came from. We do not use it for advertising, we have turned off Google's advertising and personalisation features, and IP addresses are anonymised.
If you are in the European Economic Area, the United Kingdom or Switzerland, we ask you first. Nothing is stored in your browser until you say yes. If you say no, that is the end of it — no analytics cookie is set, nothing is sent, and the site works exactly the same. Your answer is remembered in your own browser; we keep no record of it, because keeping one would mean holding data about somebody who asked us not to.
Elsewhere, Google Analytics loads when you arrive, which is what the law in those countries allows. If you would rather it did not, your browser's "do not track" and cookie-blocking settings work normally, and so do ad blockers — we do nothing to work around them.
Google is the processor for this, and its own terms apply: see Google's privacy policy. You can also opt out across every site using Google's browser add-on.
We do not use Google Analytics inside the app itself — only on the public pages. What you study, which questions you get wrong and how you score is never sent to Google.
Our own visit counter
Alongside Google Analytics we keep a small count of our own, on our own servers, and it is built so that it cannot identify you. It sets no cookie. It creates no identifier for you — not a random one, and not a hashed version of your IP address. Your IP address is never stored. The only thing it will ever put in your browser is the opt-out flag described under Asking not to be counted, and only if you switch that on yourself.
What it keeps is running totals. When one of these public pages is viewed we add 1 to a single row holding the date, which page, and the country Cloudflare says the request came from. Separately we count how many accounts were created, how many people opened the checkout and how many payments completed — one number each, per day.
Because there is no identifier, those totals cannot be joined back to you, to your account, or to each other. We can see that a page was viewed forty times and that two accounts were created; we cannot see which of those views became an account, and we cannot follow one person from a page to a signup to a payment. That is a deliberate limit, not a side effect — it is what keeps this counter free of personal data, which is why there is nothing here to ask you about and nothing to opt out of. It covers the public pages only. Nothing inside the app is counted, and what you study is never part of it.
Asking not to be counted
Two kinds of visit are left out of these totals automatically. Ours: when the site owner is signed in, their own page views are recognised and not counted, so the figures describe visitors rather than us. And automated browsers — our own tests, and anything else driving a browser — are excluded, because a script is not a visitor. Signups on the internet's reserved test domains (example.com and the like, which can never receive mail) are excluded for the same reason.
Recognising the owner means the counter's request carries your session cookie, in order to decide not to record. Nothing about the session is stored, and no other visit is identified.
There is one thing we will store in your browser, and only if you switch it on yourself: a flag saying not to count your visits. While it is set, neither our own visit counter nor Google Analytics runs on this browser at all.
It holds the single value pfc.noanalytics and nothing else — no identifier, no history, nothing about you. It lives in your browser's own storage rather than in a cookie, and we keep no record of it on our side. So it applies to this browser on this device only, and clearing your browsing data removes it.
The switch is on the site's own insights screen, which only the site owner can open. If you would like your visits excluded and cannot reach it, email us — or block analytics in your browser, which we do nothing to work around.
Payment
Full access is sold by Paddle.com Market Ltd as the merchant of record — Paddle is the seller of record, takes the payment, charges the right tax in your country and issues your receipt. Your card details are entered in Paddle's own secure window and never reach this website or our servers. Paddle receives your email address and our transaction reference; we receive confirmation that the payment completed, the amount and Paddle's identifiers for it. See Paddle's privacy policy.
Who else can see your data
- Cloudflare hosts the site and stores the account data described above, on its global network. See Cloudflare's privacy policy.
- Google — for Google Analytics on the public pages as described above, and additionally if you choose to sign in with a Google account.
- Paddle, only if you buy full access.
Nobody else. We do not sell or share your personal information, we run no advertising, and we do not track you across other websites.
How long we keep it
For as long as your account exists. Ask us to delete it and we remove your account, your email address and your progress within 30 days. Paddle keeps its own record of a completed transaction for as long as tax law requires it to, which is outside our control.
Your rights
Email us and we will give you a copy of everything held against your account, correct it, or delete it. There is no marketing list, no profiling and no advertising. The one thing you can opt out of is Google Analytics — see the section above; if you are in Europe, the UK or Switzerland you were asked before anything was set, and you can change your mind by clearing this site's data in your browser.
Children
This site is for adults preparing for a citizenship test and is not directed at children.
Security
Passwords are hashed, never stored in readable form. The sign-in cookie is HTTP-only and cannot be read by page scripts. Whether you have paid is decided on our server from a signed confirmation from Paddle — never by anything in your browser.
Official content
The official question pools are government works and are in the public domain in their own countries. This is an independent study tool. It is not affiliated with, endorsed by, or sponsored by any government or government agency, and it does not provide legal or immigration advice.
Changes
If this policy changes, the date at the top changes with it.