Privacy Policy

Who is responsible

DeutschTest is responsible for the personal data processed through this website and service. This policy explains what we collect, why we use it and the choices available to you.

Data we collect

• Account data such as your name, email address, authentication identifier and profile image.
• Learning data such as selected exams, answers, scores, saved items and progress.
• Content you submit for writing, speaking or other feedback features.
• Technical data such as device, browser, IP address, language, timestamps and security logs.

How we use data

• Create and secure your account.
• Provide mock tests, save progress and personalise your learning experience.
• Generate requested feedback and improve reliability and safety.
• Prevent abuse, diagnose errors and comply with legal obligations.

Legal bases

Where the GDPR applies, we process data to perform our contract with you, based on your consent where required, to comply with legal obligations, and for legitimate interests such as security, service improvement and fraud prevention.

Service providers

We use specialised providers to operate DeutschTest, including Supabase for authentication and data services, Google when you choose Google sign-in, Vercel for hosting and infrastructure, and AI providers when you request AI-assisted feedback. They process data only for the relevant service and under applicable safeguards.

Cookies and authentication

Essential cookies and similar storage are used to keep you signed in, protect authentication flows and remember necessary preferences. These are required for account features to work securely.

Retention

We keep personal data only for as long as needed to provide the service, meet legal obligations, resolve disputes and maintain security. Retention periods depend on the type of data and why it is processed. Account data may be deleted or anonymised after an account is closed, subject to required retention.

International processing

Some providers may process data outside the European Economic Area. Where required, transfers are protected through an adequacy decision, standard contractual clauses or another lawful safeguard.

Your rights

• Request access to and correction of your personal data.
• Request deletion or restriction where the legal conditions are met.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for future processing.
• Request data portability and lodge a complaint with a supervisory authority.

Security and changes

We use appropriate technical and organisational measures to protect personal data, but no online system is completely risk-free. We may update this policy as the service or legal requirements change and will show the new date on this page.