Privacy Policy
Last updated: October 2026
Controller
Vipplov Choudhary
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Deutschland
Email: hello@passcitizen.com
Your progress data stays on your device
All your progress, including quiz results, exam history, streak, and preferences, is saved only on your device: in your browser's local storage on the website, and in the app's own storage on Android. We never receive it, and you do not need an account.
Data processed when visiting the site or using the app
Visiting passcitizen.com, or using the app when it sends the exam statistics described below, requires processing technically necessary data, including your IP address and, on the website, the requested URL, browser type, and referrer. This is processed by our hosting provider Vercel and is not linked to any identifiable individual.
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in the technical operation and security of the site and app.
Anonymous exam statistics
When you start or finish a mock exam or mini quiz, we record an anonymous event. It contains only: the date and time, whether the exam started or finished, the exam type, which country's test it was, whether you used the website or the app, whether you passed, and a random ID created for that single attempt. For website visitors it also contains the country you are visiting from, worked out from your IP address; the IP address itself is never stored. For app users we do not save the country. We do not store your IP address, your name, or any account, device, or advertising ID, and separate attempts cannot be linked to each other or to you. We use these statistics to understand how the practice tests are used.
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in improving our practice tests.
We keep exam statistics for as long as we need them to improve the practice tests.
Cookies and consent
On your first visit to the website we ask for your cookie consent via the cookie banner. Analytics cookies are only activated if you accept. You can change your choice at any time via the "Manage cookies" link in the footer. Technically necessary functions do not require consent under § 25 TDDDG. The Android app uses no cookies and no third-party analytics tools. It only sends the anonymous exam statistics described above, which we keep ourselves.
Third-party services
Vercel (hosting)
Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel hosts passcitizen.com and processes the access data described under "Data processed when visiting the site or using the app". Data transfers to the US take place under the EU–US Data Privacy Framework. On the website, Vercel also provides Vercel Web Analytics, which counts page visits without cookies and does not identify individual visitors. Privacy policy
Supabase (database)
Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Stores the anonymous exam statistics described above. The data is stored in the EU (Ireland). Where Supabase or its subprocessors access data from outside the EU, transfers take place under the EU Standard Contractual Clauses. Privacy policy
Google Analytics 4
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Used on the website only, not in the app, to understand how visitors use the site. Only activated after you accept cookies via the consent banner. Google Analytics sets cookies (_ga, _ga*) on your device to distinguish users and sessions. Data transfers to the US take place under the EU–US Data Privacy Framework. You can opt out at any time using Google's opt-out tool at tools.google.com/dlpage/gaoptout. Legal basis: Art. 6(1)(a) GDPR, consent. Privacy policy
Your rights under GDPR
As an EU resident you have the following rights:
- Right of access (Art. 15): request information about data we hold about you
- Right to rectification (Art. 16): request correction of inaccurate data
- Right to erasure (Art. 17): request deletion of your data
- Right to restriction (Art. 18): request we limit how we process your data
- Right to object (Art. 21): object to processing based on legitimate interest
- Right to data portability (Art. 20): request your data in a portable format
- Right to withdraw consent: where processing is based on consent, you can withdraw at any time via the cookie banner
We do not store data that identifies you. The exam statistics are anonymous and cannot be traced back to one person, so we cannot pick out your records on request. For data held by Google or Vercel, please refer to their privacy policies linked under "Third-party services".
You also have the right to lodge a complaint with your national data protection supervisory authority. In Germany: Berliner Beauftragte für Datenschutz und Informationsfreiheit, http://www.datenschutz-berlin.de
Changes
This policy will be updated when our services change. The current version is always at https://passcitizen.com/privacy.