Privacy policy

1. Information we use

• Account information: your email, authentication details and any profile information you choose to provide. Authentication is handled by Supabase; passwords are hashed rather than stored as plain text.
• Practice information: completed results, answers and progress associated with your account.
• Purchase records: account and checkout references, payment status, amounts, currency and information needed to grant or manage pack access. Card details are entered into Stripe’s checkout; we do not store full card numbers or security codes.
• Support messages: your contact details, message and any order reference you provide when asking for help.
• Usage information: page and interaction information used by Google Analytics and our advertising providers.

Forum posts and replies are public, shown with your username, and may be indexed by search engines. Please do not post private account, payment or personal information in the forum.

2. Why we use it

We use account, practice and purchase information to provide the service, save results, grant purchased access, answer support requests and prevent abuse. We use analytics to understand usage and advertising to help fund free practice. Optional advertising and analytics processing may rely on consent where required; you can use the available privacy controls and your browser settings to manage your choices.

3. Providers and payments

Supabase provides authentication and database hosting. Netlify hosts the website. Stripe Managed Payments and Link handle checkout and transaction services, including information you provide directly during payment. Google Analytics measures site usage. Advertising uses Mediavine Journey and its partners.

These providers may process information in countries other than your own. Their processing locations, safeguards and independent privacy responsibilities are described in their notices. We do not sell your account or practice records.

4. Cookies and local notes

Login and security features use essential browser storage. Analytics and advertising providers can use cookies or similar technologies. Manage cookies through your browser and any consent controls provided on the site; blocking storage can affect login and saved preferences.

Your interview answer notes are stored locally in your browser and are not sent to our API. They do not sync between devices. Clearing browser storage removes them, so copy any notes you want to keep elsewhere.

5. Security and retention

We use access controls and encrypted connections to protect information, but no online service can guarantee complete security. If a breach requires notification, we will follow the applicable reporting requirements.

Account-linked practice and access records are used while your account is active. You can request deletion or delete your account from your profile. Some transaction, security or support records may need to be retained for applicable legal obligations or to resolve a dispute, including records retained independently by the payment provider. Backup deletion and providers’ own retention processes may take additional time.

6. Your choices and rights

Depending on your circumstances and applicable data-protection law, you can ask to access, correct, delete or receive a copy of your personal data, object to certain processing or withdraw consent. Contact us privately using the email below. You can also manage your account from Dashboard → Profile.

If you are unhappy with how we handle a data request, you can contact the Information Commissioner’s Office.

7. Children and updates

The platform is intended for adults preparing for railway recruitment, rather than children under 16. Contact us if you believe a child’s information has been provided. We will update this policy’s date when it changes and provide further notice where required.