A quiet space, with privacy built in.

For young learners

Use a nickname. We do not need your full name, school, birthday, photo or location. Your answers and report are private. There is no public leaderboard and we do not show advertising. Ask your parent or guardian if you want help with your information.

What the service keeps

We store the selected papers, printable-download type and first-download time, a short learner nickname, answers, question flags, timing, score, payment references, subscription and invoice identifiers, paid-through and cancellation state, and the parent’s purchase acknowledgements. Stripe handles payment and purchaser contact information; Exam Quay does not receive or store card numbers.

For repeat detection, the server derives a private coded identifier from the purchaser email and learner nickname. The exam database does not keep the raw email. Order-email records contain a recipient hash, immutable confirmation content and delivery status. This identifier is still treated as personal data. Request IP addresses are converted into short-lived rate-limiting identifiers; infrastructure providers may retain separate security logs.

Why we process it

We use order and sitting information to provide the purchased service and handle support, on the basis of our contract with the parent or guardian. We keep necessary purchase records to meet legal obligations. Limited security controls and pseudonymous cohort comparisons are based on our legitimate interests in operating a reliable assessment service; you may object to the comparison processing.

We do not use sitting data to make school admission decisions. We do not sell it, use it for advertising or send it to a generative AI service when a learner sits a paper.

Storage on your device

Your browser stores private access passes and temporary unsaved answer drafts so that you can return or recover after a connection problem. This storage is necessary for the features you request. Anyone using your unlocked browser profile or private access pass might access saved papers, results and subscription billing management. Download your pass privately and use “Remove from this device” on shared devices. Optional parent advertising measurement is off unless a parent chooses to allow it. The exam room does not load advertising or analytics scripts.

Optional parent advertising measurement

A parent can allow us to remember the campaign and ad-click ID for 30 days in this browser. When that parent arranges a purchase, we can associate it with the order and send the click ID, an order reference, payment time and amount to Google Ads to measure advertising results. This relies on consent, does not affect price or access, and is not used for personalised advertising. Names, emails, learner nicknames, questions, answers and scores are never included. We keep this optional order attribution for at most 90 days.

Use “Parent measurement choices” and “No thanks” to stop future browser measurement and remove attribution from saved orders available on this browser. For another device or an already imported conversion, contact support with your order reference so we can handle withdrawal and any supported removal request. Withdrawing consent does not change the lawfulness of earlier processing. Google has its own retention and privacy controls; deletion there is not performed merely by clearing this browser.

We also use aggregate counts from necessary service records, such as paid orders, checkouts, refunds, completed sittings and failed emails, to operate and improve the service. These reports do not contain learner names or individual answers.

Providers and international transfers

Netlify hosts the exam application and managed database; Stripe processes payments. Resend delivers transactional order confirmations using the purchaser email from Stripe, order details and the accepted terms. These emails contain no learner nickname, answers, score or private access pass. These providers process information in accordance with their service and data-processing terms and may process it outside the UK, using their applicable transfer safeguards. Payment information is governed additionally by Stripe’s privacy notice. Resend processes delivery records, including delivery failures and bounces; open and click tracking are disabled.

• Netlify privacy notice ↗
• Stripe privacy notice ↗
• Resend privacy notice ↗

How long it stays

Paid-paper access lasts 90 days from payment. Demonstration access lasts 24 hours. A daily cleanup removes detailed answers, private access credentials and learner labels after those one-off periods. Monthly subscriptions retain the pass and billing references while billing remains open so that the purchaser can cancel. Detailed attempts are retained for at most 12 months and removed 90 days after the last paid period if access stays inactive. Cancelled or expired subscription records are removed 12 months after the last paid period. Pseudonymous scores, printable-download records and order references are retained for up to 12 months for comparison and support, then deleted by the application cleanup. Rate-limiting records are removed after one day. Payment and legally required business records held by Stripe or the operator may have separate retention requirements. Provider backups and logs follow the providers’ retention policies.

Your choices and rights

A parent or learner can ask for access, correction, deletion or restriction of personal data, and can object to legitimate-interest processing, including cohort comparison. We may ask for proportionate proof that an order is yours. Use the support page; do not send passwords or full payment details. You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk.