Privacy Policy
This policy explains what personal data C-Test Prep processes when you use ctestprep.de, why, with which providers and what rights you have.
Last checked:
Who is responsible
Contact: support@ctestprep.deFor any privacy request, write to support@ctestprep.de.
Visiting the website
Our hosting provider Vercel Inc. (USA) processes technical data about each request, such as IP address, browser, requested page and time, to deliver and secure the site. Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
Free test
You can take the free test without an account. Your answers are scored in your browser only and are not sent to us.
Your account
Sign-in and accounts are provided by Clerk, Inc. (USA). We process your email address, your name if you give it, your sign-in method and session data to run your account and unlock the Pass. We store the purchase on your account (date, access end date, Stripe session ID). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Practice progress
We do not store your answers and results from the trainer on our servers. They are kept in your browser’s local storage (key "ctestprep:v1"), where you can delete them at any time.
Payments
Payments are processed by Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA). Card details go directly to Stripe; we never see them. We receive your email address, country, the product, amount and payment status to grant access. Legal basis: performance of a contract and legal retention duties (Art. 6(1)(b) and (c) GDPR).
Emails
We send the purchase confirmation through Resend, Inc. (USA). Legal basis: performance of a contract. We do not send marketing emails.
Analytics and advertising
We currently use no analytics or advertising services. If that changes, we will update this policy first and ask for your consent where required.
Cookies and local storage
- Clerk cookies (for example __client, __session): keep you signed in.
- ctestprep:v1 in local storage: your practice progress.
- ctestprep-theme in local storage: light or dark design.
Transfers outside the EU
Several providers are based in the USA. Transfers rely on adequacy decisions such as the EU-US Data Privacy Framework or on the EU Standard Contractual Clauses.
Retention
- Account: as long as it exists; deleted when you delete it or ask us to.
- Purchase records: as long as tax and commercial law require.
Your rights
You can request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. You can also complain to a data protection authority. Requests to support@ctestprep.de.