Privacy policy
Last updated: October 2026. Plain-language summary — this site aims to collect as little data as possible.
What we collect
- Accounts: email address, optional display name, and a hashed password (Argon2 — we can never read your password).
- Practice data: which questions you answered, whether you got them right, how long they took, and your streaks, XP, and badges.
- Preferences: theme and reduced-motion.
Anonymous practice
You can practice without an account. Anonymous attempts are stored under a random session id in a cookie and are not linked to an email address. Signing up later keeps your progress under your account.
Analytics (Google Analytics)
If you accept, the site uses Google Analytics (GA4), a service of Google, to measure how the site is used. At a high level this means which pages are visited, roughly how many visitors there are, which kind of device and browser they use, and approximately where they are in the world, together with an identifier that Google Analytics stores in a cookie on your device. The address of each page is reported without anything after the page path, so query strings are not sent. Pages for signing in, registering, resetting a password, your account, the dashboard, exams, challenge links and the admin area are not reported at all. We do not send your name, e-mail address, account id or anything you type, including your answers. Advertising features and Google signals are not turned on.
The data is processed by Google. Until you choose, and if you decline, the site tells Google Analytics that storage is denied, so it does not set its cookies on your device and does not use them to recognise you between visits. In that state, Google Analytics may still receive a basic signal each time a page is opened: the page address (without anything after the path), the language and screen size of your browser, and a random identifier that is not saved on your device. As with any request to a website, Google also receives your network (IP) address. Measurement that uses cookies only happens after you accept. You can withdraw your consent, or give it later, at any time with the “Cookie settings” button in the footer; withdrawing stops cookie-based measurement from your browser but does not delete data that was already collected, and the cookies Google Analytics already set remain until they expire or you delete them in your browser settings. For how Google handles this data, see Google's information on how Google Analytics uses data.
Children's privacy (COPPA)
If you are under 13, ask a parent or guardian before creating an account. We do not knowingly collect more personal information than necessary to provide the service.
Your choices
- Update your preferences anytime from your account settings.