Privacy Policy

eTestor operates https://etestor.com. For any privacy question, or to exercise any right described below, contact [email protected].

Account data. Your email address, an optional display name, and — if you set one — a password, which is stored only as a bcrypt hash and is never readable by us. If you sign in with Google or Apple we receive your email address and name from them; we never receive your password.

Test data. The answers you give, the scores computed from them, and when you started and finished. This is the most sensitive category we hold, and we treat it that way: it is never sold, never used for advertising, and never shared with another user unless you explicitly start a comparison with them.

Purchase data.What you bought and when. Card details are entered on Stripe's systems and never reach our servers — we store only a Stripe identifier and the outcome.

Technical data. Standard server logs, including IP address and browser user-agent, kept for security and abuse prevention.

We process account and purchase data to perform our contract with you. We process technical data under our legitimate interest in keeping the service running and secure. Where you are in a jurisdiction that treats psychometric answers as a special category of data, we rely on your explicit consent, given when you choose to take a test — and you can withdraw it at any time by deleting your account.

We keep this list short deliberately. Each of these is a processor acting on our instructions, not a party we sell data to:

• Stripe — payment processing. Receives your email and payment details directly.
• Cloudflare — content delivery and transactional email. Sees request metadata and the emails we send you.
• OpenAI — generates written analysis. Receives your scores and demographic band, never your email, name or account identifier.
• Google and Apple — only if you choose to sign in with them.

We do not sell personal data, and we do not share it with advertisers.

Account and test data are kept until you delete your account, after which they are removed within 30 days. Purchase records are kept for as long as tax and accounting law requires, typically six to seven years, because we are not permitted to delete them sooner. Server logs are kept for 90 days.

Depending on where you live you may have the right to access a copy of your data, correct it, delete it, export it in a portable format, object to processing, or complain to your local data protection authority. We apply these rights to everyone regardless of location. Email [email protected] and we will respond within 30 days.

We use cookies that are strictly necessary to run the service: one to keep you signed in, and one to protect forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies.

The service is not intended for anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

If we change this policy materially we will update the date at the top and, where the change affects how we use data you have already given us, email you about it. See also our Terms of Service.