Privacy Policy

Last updated: August 22, 2026 · CSCA Start (cscastart.com)

What we collect

Account data: your email address (and name/avatar if you sign in with Google).
Study data: your practice answers, mock exam results and saved questions, linked to your account, so you can review them.
Contact data: whatever you choose to include when you email or message us.
Preferences: interface language, question language and light/dark theme, stored in cookies on your device.
Access logs: when a page is requested we record the page, the referring site, your IP address, the country and city your network resolves to, your browser’s user-agent and language, and how long the page was open. This is kept on our servers, not on your device, and is used to understand which pages help people and to detect scraping and abuse.
Free-trial counter: if you answer questions without an account, we store a counter of how many of the free questions you have used, plus the IP address it came from, so the free allowance works and cannot be farmed automatically.

Cookies

We use cookies only where they are needed to run the site, which is why you do not see a cookie banner here:

Sign-in: keeps you logged in.
Preferences: your interface language, question language and theme.
Free-trial counter: identifies your free allowance if you practise without an account.

We do not use advertising cookies, do not sell or share your data, and do not track you across other websites. We previously set two long-lived analytics cookies; they were removed in August 2026 and are deleted from your browser the next time you visit. Visitors are now counted using a short-lived identifier that our server derives from your IP address and browser on the day of the visit; it changes daily and cannot be used to follow you over time.

Where it lives

Data is processed by: Supabase (database & authentication, hosted in AWS ap-southeast-1, Singapore), Vercel (website hosting, plus its cookie-free Web Analytics and Speed Insights), Resend (sending account and service emails), Stripe (payments, if you buy something), and Google (only if you choose Google sign-in). If page analytics is enabled it is Plausible, which is cookie-free and collects no personal data.

How long we keep it

Access logs and usage events: deleted automatically after 90 days.
Free-trial counters: deleted after 180 days of inactivity.
Account and study data: kept until you delete your account.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. Email admin@cscastart.com from your registered address and we will act within 30 days. If you are in the EU or UK, our lawful basis is performance of the service you asked for (your account and study data) and legitimate interest (keeping the site working, preventing abuse, and understanding which pages help people); you may object to the latter at any time using the same address.

Contact

admin@cscastart.com