Privacy

Data stored on your device

As a guest, practice attempts, mock-exam history, study-plan settings (including exam date and daily goal), and flashcard review state stay in your browser using localStorage and IndexedDB. The browser also stores language, theme, analytics choice, and cached app files. These storage operations are necessary to provide the features you request (section 25(2)(2) TDDDG). Clearing the site's browser data removes them.

Hosting and request logs

When you access PrepBench, Vercel processes technical request data such as IP address, requested URL, time, and browser or device information to deliver and secure the service. The legal basis is our legitimate interest in operating a reliable and secure service (Article 6(1)(f) GDPR). Logs are retained only for as long as needed for those purposes under the provider's applicable retention settings.

Optional product analytics

If you allow analytics, the app creates a random installation ID that is not linked to an account. Events contain that ID, an event UUID, the certification, a high-level action and mode, an optional return bucket, a coarse arrival source derived from the tagged link or referring site, and event timestamps. We store neither the landing URL and its query string nor the referring page address. We use the events only to measure whether installations begin, complete, submit mock exams, and return to study. We do not collect answers, scores, learning objectives, exam dates, account details, advertising identifiers, or free text.

Raw events are pseudonymous, not anonymous. The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Refusing analytics does not limit the app. You can change your choice through Analytics settings in the footer. Stopping collection immediately deletes the local queue, installation ID, arrival source, and return markers; a daily retention job deletes previously received events once they are more than 90 days old. Withdrawal does not affect earlier lawful processing.

Vercel provides the analytics function and Neon the PostgreSQL database. Analytics is not used for advertising, profiling, or automated decisions, and reports contain aggregate counts only.

Optional Google account and sync

When you sign in, we receive or store:

• name, email address, profile-picture URL, Google account ID, and authentication tokens needed to maintain the connection;
• practice attempts (including selected answer, result, mode, and time), mock-exam results and completion times, study-plan exam date and daily goal, and flashcard review state; and
• an authentication cookie containing a signed JWT session token.

The legal basis is performance of the optional account and sync service you request (Article 6(1)(b) GDPR). Google handles authentication; we never receive your Google password. Account and synced study data remain until you ask us to delete the account. Session cookies expire or are removed when you sign out. The app remains usable as a guest if you do not provide this data.

Question reports

If you submit a question report, we store its category, your optional note, the certification and question IDs, language, route pattern, release version, and receipt time. Reports are not linked to your account, analytics installation, answers, scores, or session. Please do not include personal data in the note. Submitting is your explicit consent for us to review that report; refusing analytics does not prevent reporting. Reports are deleted after 180 days.

Processors and international transfers

Vercel provides hosting, server functions, and logs; Neon provides the database; and Google provides authentication. The primary server function and database region is Frankfurt, Germany. These providers and their subprocessors may also process data outside the EEA, including in the United States. Where required, transfers use the applicable adequacy decision or EU standard contractual clauses under the providers' data-processing terms.

We do not sell personal data or use it for advertising.

Controller and your rights

The controller is Maximilian Schlipf. The postal address appears in the legal notice. Contact: prepbench.feedback@gmail.com.

Where applicable, you may request access, rectification, erasure, restriction, objection, or portability of your personal data. You may withdraw analytics consent at any time through the footer and complain to the competent data-protection supervisory authority. To delete an account and synced progress or exercise another right, email the address above. No processing produces legal or similarly significant effects through automated decision-making.

Trademark

ISTQB® is a registered trademark of the International Software Testing Qualifications Board. PrepBench is independent and is not affiliated with, endorsed by, or certified by ISTQB. All questions are original works written against the publicly available syllabi.