Privacy Policy
What we collect when you use OnlineTestPrep, why we need it, who processes it for us, and what you can ask us to do with it.
Who is responsible
TestPrep LLC., 777 NW 72nd Ave STE 1075, Miami, FL 33126, United States, operates OnlineTestPrep and is responsible for your personal data. Use the contact form for privacy requests.
What we collect and why
| Data | Why |
|---|---|
| Name, email address, password (stored as a hash) | To create and secure your account and let you sign in. |
| Your answers, time spent per question, scores and practice history | To run the tests and question banks, produce your reports and keep your history. |
| Speaking recordings and written responses (PTE, IELTS and TOEFL speaking and writing, GRE and ACT essays) | To score them. They are sent to AI scoring services for that purpose only. |
| AP practice tests: your answers, free-response answers you type, and photos of free-response answers you write on paper | To run the test and estimate its score. While you take an AP practice test, your answers are kept in your browser until the test ends, so that they are not lost if the page reloads; they are deleted when you hand the test in. Photos of your handwritten answers are kept in private storage that only our servers can read, and are sent, with typed free-response answers, to an AI scoring service to estimate their score. |
| LSAT practice: answers, flags, text annotations, section deadlines, writing notes and essays | To save and resume your sessions on our servers and prepare your completed review. LSAT does not record time spent per question. Writing is unscored and uses pre-authored learning materials; your essay is not sent to an AI scoring service. |
| Purchases: products, amounts, dates, and the billing details you give Stripe | To take payment, grant access, issue receipts and invoices, and meet accounting duties. |
| Messages you send us | To answer them. |
| Usage statistics (only with your consent) | To understand which pages and features are used. See Cookies. |
Account security. To keep each account to one session at a time and to prevent account sharing and bulk copying of our content, when you sign in we record one-way hashed digests of your browser's user agent and of your network block (the first three parts of your IP address), your session identifier, the site you signed in on, and when a session was closed because of a sign-in on another of our sites or another device. A new sign-in to your account closes all your other sessions. We do not store your IP address or browser string themselves for this purpose and we do not use device fingerprinting. These records are deleted 90 days after last use. Legal basis: performance of our contract with you and our legitimate interest in keeping accounts secure.
The leaderboard in your dashboard shows your points and place. Your name (first name and surname initial) appears only if you turn this on yourself; otherwise other students see only a number in place of your name.
We do not sell your data and we do not use it for advertising.
Who processes it for us
- Supabase hosts the database and handles sign-in. Accounts are shared across TestPrep Group websites, so one sign-in works on each of them.
- Stripe processes payments. We never see or store your full card number.
- Vercel hosts the website.
- AI scoring providers receive speaking recordings, written responses and photos of handwritten AP free-response answers to score them.
- Google Analytics measures site usage, and only sets its cookies if you allow analytics.
Some of these providers process data outside your country, including in the United States, under their own data protection commitments.
How long we keep it
Account and practice data are kept while your account is open. Payment records are kept for as long as accounting and tax law require. Messages are kept for as long as needed to deal with them.
An account that has not been used for 90 days is deleted, together with its learning data. We send an email to your confirmed email address 14 days before that happens, giving the date. Signing in, or simply using your dashboard, before that date keeps your account. Staff accounts and any account with a purchase are never deleted this way, and nothing you have paid for is ever deleted.
Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete your account and the data linked to it, subject to what we must keep by law. Depending on where you live, you may also have the right to object to or restrict processing and to complain to your data protection authority. Use the contact form with the address on your account.
When an account is deleted, we keep a record of the deletion (the email address; the dates the account was opened, last used and deleted; the number of practice tests deleted with it) for 2 years, then erase it.
We also use this record to stop a new account opened with the same email address from getting the free trial again (the free practice tests, the free question-bank questions and the AI Tutor trial). Anything you buy is not affected. Our legal basis is our legitimate interest in offering the free trial once per person.
Analytics cookies are off until you allow them; you can change your choice at any time from Cookie settings in the footer. More detail is in the Cookie Policy.