Privacy

Using the app as a guest

Without signing in, your practice attempts and flashcard schedule are kept only in your browser using localStorage and IndexedDB. They do not leave your device, and clearing your browser data removes them.

Optional product analytics

If you allow analytics, the app creates a random installation ID that is not linked to an account. Events contain that ID, an event UUID, the certification, a high-level action and mode, an optional return bucket, and event timestamps. We use them only to measure whether installations begin, complete, submit mock exams, and return to study. We do not collect answers, scores, learning objectives, exam dates, account details, advertising identifiers, or free text.

Because the installation ID distinguishes one browser installation, the raw events are pseudonymous rather than anonymous. Reports contain aggregate counts only. The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Analytics is optional and refusing it does not limit the app.

Your decision is stored locally with the consent-notice version and decision time. It is not sent as an additional analytics event. You can change the decision through Analytics settings in the footer. If you stop collection, the queue, installation ID, and return markers are deleted from your browser immediately. Previously received raw events remain only until their normal deletion, at most 90 days. Withdrawing consent does not affect processing that was lawful before withdrawal.

Vercel provides hosting and the analytics function, and Neon provides the PostgreSQL database. The function and database used for these events run in Frankfurt, Germany. These providers process data only to operate the service on our behalf. Analytics is not used for advertising, profiling, or automated decisions.

If you sign in with Google

We receive and store, from your Google account:

• your name, email address, and profile picture URL;
• your study progress — practice attempts and flashcard review state, per certification — so it syncs across your devices.

We process this data to provide the optional account and sync service you request (Article 6(1)(b) GDPR). Google handles authentication; we never see your Google password. We do not sell the data or use it for advertising. Vercel and Neon process it as infrastructure providers.

Controller and your rights

The controller for PrepBench is Maximilian Schlipf. Contact: prepbench.feedback@gmail.com.

Where applicable, you may request access, rectification, erasure, restriction, or portability of your personal data. You may withdraw analytics consent at any time through the footer. You also have the right to complain to the competent data-protection supervisory authority. To delete an account and synced progress or exercise another right, email the address above.

Trademark

ISTQB® is a registered trademark of the International Software Testing Qualifications Board. PrepBench is an independent study tool and is not affiliated with, endorsed by, or certified by ISTQB. All questions are original works written against the publicly available syllabi.