Privacy Policy

Configurable disclosure categories prepared for this platform:

• Account information
• Authentication and security information
• Assessment information
• Learning and activity information
• Technical and log information
• Analytics information
• Contact-form communications
• Cookie and device information

Purposes prepared for confirmation:

• Create and manage accounts
• Verify email addresses
• Authenticate users
• Provide assessments
• Calculate and store assessment results
• Maintain assessment history
• Provide learning recommendations
• Send service communications
• Maintain security
• Troubleshoot technical problems
• Improve content and the product
• Comply with applicable obligations

The account model is intentionally minimal and is prepared for:

• Display name
• Email address
• Authentication credentials and related security data

Authentication and account security

Implementation details such as token mechanics are intentionally not described.

Assessment information prepared for disclosure:

• Assessment category
• Questions presented
• Selected responses
• Whether responses were correct
• Topic
• Internally assigned difficulty
• Time spent per question
• Total assessment duration
• Assessment status
• Weighted score
• Platform level
• Attempt history
• Reassessment status

Learning and activity information

Viewing a public learning page does not automatically create authenticated learning history.

Private application pages

Public learning and blog pages are intended to be indexable. Dashboards, assessment history, individual results and account pages are private application pages prepared as noindex.

noindex is not access control. Actual privacy depends on the authentication and authorisation implemented by the backend. There is no public leaderboard and no public results profile.

Potential operational information:

• IP address
• Browser and device characteristics
• Timestamps
• Request logs
• Security events
• Application errors and logs

Analytics and Service Improvement

Teaching Google Analytics as a subject does not mean this website uses Google Analytics. No provider is named until one is selected and implemented.

Configurable categories, to be rendered only for technologies actually in use:

• Essential and security
• Authentication and session
• Preferences
• Analytics
• Advertising and personalisation

Service and account communications planned by the current product architecture:

• Email verification
• Password recovery
• Assessment result email
• 30-day reassessment reminder
• Necessary account and security communication

Information a contact submission may include:

• Name, when supplied
• Email address
• Reason for contact
• Subject, when supplied
• Message
• A relevant page URL, when voluntarily supplied

Functional categories that may apply once vendors are selected:

• Hosting and infrastructure
• Database
• Email delivery
• Analytics
• Security and monitoring
• Authentication infrastructure

Structure prepared for the disclosures the final policy may need to address:

• Disclosures to service providers acting on the platform's behalf
• Legally required or safety-related disclosures
• User-directed disclosure
• Business-transfer scenarios, if applicable

Retention is expected to differ by category, including:

• Account information
• Assessment records
• Aggregate or de-identified analytics
• Logs and security records
• Contact inquiries
• Email records

Final wording must state precisely:

• What personal information is deleted
• What records remain
• What is anonymised
• What legal or security retention may still apply

Restrained, implementation-backed principles prepared for confirmation:

• Authentication controls
• Access controls
• Encrypted transport
• Secure credential handling
• Ongoing maintenance and monitoring

Legal concepts that may or may not apply depending on jurisdiction:

• Access
• Correction
• Deletion
• Restriction
• Objection
• Portability
• Withdrawal of consent
• Complaint rights