Privacy policy

1. Who we are

AceJobTest (acejobtest.com) is an online practice site for employment assessments, run in the UK by an individual, Mohamed Ibnouf. He is the controller of the personal data described here. Contact: ibnoufm5@gmail.com.

2. What we collect

• Account details: your email address and the name you give us. You can sign in with an email and password, or with Google.
• Google sign-in: if you choose it, we use only your name and email address from your Google account. Google also passes a profile picture link and an account identifier, which our authentication provider keeps with your login record; we do not use or display them. We never see your Google password.
• Practice activity: the tests you complete, your answers, scores, time taken and a breakdown by skill.
• Plan and payment references: your plan, when it ends, your Stripe customer reference and when you accepted the Terms at checkout. Stripe handles your card details; we never receive or store them.
• Analytics events, only if you accept analytics: pages and practice tests used, which instrumented button was pressed, a coarse device type and browser family, the country supplied by our host, and the referrer and campaign tags of your first visit. We do not store your IP address, the raw browser string, your test answers or your email address in these events.
• Account and payment events: creating an account and paying are recorded against your account id, even if you rejected browsing analytics, because they are actions you took with us. Campaign details are added only if you had accepted analytics.
• Messages you send us, for example a support or data request.

3. Why we use it, and our legal bases

• To create and secure your account, run the practice tests, save your scores and provide paid access: performance of our contract with you.
• To take payments, keep billing records and meet tax and accounting duties: contract and legal obligation.
• To understand how the site is used and improve it, using analytics events: your consent, which you can withdraw at any time.
• To record signups and payments, prevent abuse and keep the service secure: our legitimate interests in running and protecting the site.
• To answer your messages: legitimate interests.

We do not sell your data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.

4. Who processes it for us

• Supabase — authentication, our database and the emails that confirm your address or reset your password.
• Vercel — hosting and delivering the website. Like any host, Vercel processes your IP address to serve pages and may keep short-term request logs under its own policies; we do not copy your IP address into our database.
• Stripe — payments, subscriptions, receipts and fraud prevention. Stripe is also a controller for some payment data; see its own privacy policy.
• Google— only if you choose “Continue with Google”, to confirm who you are.

Some of these providers may process data outside the UK. Where they do, the transfer is protected by UK adequacy regulations or approved contractual safeguards. We may also disclose data where the law requires it.

5. How long we keep it

• Saved test attempts (answers, scores and timings) are deleted automatically after 7 days.
• Your account (email, name, plan) is kept until you ask us to delete it.
• Payment records held by us and by Stripe are kept for as long as tax, accounting and dispute rules require.
• Analytics events have no automatic deletion period. We keep them to understand how the site is used and delete them if you ask. If your account is deleted, they are no longer linked to it.

6. Cookies and similar storage

• Essential:sign-in cookies from our authentication provider, a short-lived cookie that remembers which page to return you to after Google sign-in, and a note in your browser of your analytics choice. Stripe's checkout sets its own cookies for payment and fraud prevention.
• Analytics, only after you accept:a visitor id (up to 400 days), a session id (30 minutes, renewed while you browse) and a record of your first visit's landing page, referrer and campaign (up to 400 days). These are our own first-party cookies. We do not use Google Analytics or advertising cookies.

You can change your choice at any time with “Cookie settings” in the footer. Rejecting deletes the analytics cookies and stops further browsing events.

7. Your rights

Under UK data protection law you can ask to access your data, correct it, delete it, restrict or object to how it is used, or receive a copy to take elsewhere. Where we rely on consent, you can withdraw it at any time. To make a request, email ibnoufm5@gmail.com from the address on your account. We may need to confirm it is you, and we will reply within one month.

If you are unhappy with how your data is handled, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

8. Security

Data travels over encrypted connections. Database access is limited by row-level security so each person can read only their own records, and privileged keys stay on the server. No online service is perfectly secure; if a breach affects you we will tell you and the ICO where the law requires it.

9. Children

AceJobTest is meant for job applicants aged 16 or over, and is not designed for children.

10. Changes

If this policy changes we will update the date at the top. See also our Terms of service.