Privacy policy

Who we are

The service is operated by Noreng Solutions, company number 936 256 813 (Norway), referred to below as we. We are the controller of the personal data collected when you use the service. For any question about your data: espennoreng@gmail.com.

This is a translation of our French privacy policy, provided for convenience. In the event of any discrepancy, the French version at /confidentialite prevails.

Data we process

Account: email address, name (if you provide one) and password (stored only as a cryptographic hash). You can practise without an account; in that case only an anonymous identifier is stored in a cookie.

Practice data: your answers, results, progress and readiness score. These are used to personalise your revision and to show you your statistics.

Purchases: payments are processed by Stripe. We never store your card number; we receive only a payment confirmation and a customer reference passed on by Stripe.

Technical: cookies strictly necessary for sign-in and for your session. We use no advertising cookies and no third-party trackers.

Purposes and legal bases

We process your data to provide the service you asked for (performance of a contract, Article 6(1)(b) GDPR), to meet our accounting obligations on purchases (legal obligation, Article 6(1)(c)) and to send you emails relating to your account, such as confirmations and password resets (performance of a contract).

Processors

We use the following processors: Stripe (payment), Resend (email delivery) and Hetzner (hosting and storage in the EU/EEA). A data processing agreement is in place with each of them.

Retention and deletion

Your data is kept for as long as your account exists. You can delete your account at any time from Settings. Deletion erases your profile and practice data, and anonymises your answer history. Purchase records are kept for the period required by accounting rules.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and the right to lodge a complaint with the CNIL, the French data protection authority (cnil.fr). Write to espennoreng@gmail.com and we will reply within 30 days.