Privacy Policy
Last updated: 10 July 2026
TestDayTwin is operated by an independent sole proprietor based in Canada. We keep data collection to a minimum. This policy explains what information is processed, why it is needed, how long it remains, who receives it, and the choices available to you.
The short version
- You can browse and practise without an account. Account-free progress stays in your browser.
- Without sign-in, progress stays on your device. If you choose Google sign-in, your plan and progress summaries sync to your account.
- Cloud progress contains completion and scored-attempt summaries—not answers, essays, recordings, or question content.
- Optional AI scoring sends the question and your response to Google's Gemini API. TestDayTwin does not retain them, but Google processes them under its own terms.
- Optional official-score feedback is stored for 180 days to measure whether practice estimates are accurate.
Data at a glance
| Information | Purpose | Where and how long |
|---|---|---|
| Local study plan, progress, mistake-review details, and privacy choice | Remember your work, including the exact answer and explanation needed for your private mistake notebook | Your browser, until you clear this site's data |
| Google account ID and verified email | Authenticate you and display your account | Signed session cookie, up to 7 days |
| Cloud progress summaries | Sync progress between your devices | Cloudflare KV, until you delete the cloud copy |
| Anonymous aggregate product events | Measure whether learners start and complete practice | Cloudflare KV, 45 days |
| AI-scoring question, response, and numeric measurements | Generate optional detailed feedback | Processed by Google; not retained by TestDayTwin |
| IP-based usage counters | Prevent automated abuse and control API costs | Cloudflare KV, approximately 1–2 days |
| Optional predicted score, official score, rubric, and comment | Evaluate and calibrate score estimates | Cloudflare KV, 180 days |
Detailed explanation
Practice progress
Your plan and progress are first saved locally in your browser. Without sign-in, they never leave that device. You can erase the local copy at any time by clearing your browser's site data.
Optional Google sign-in and progress sync
If you choose Google sign-in, we receive your verified email address and Google's stable account identifier. We use the stable identifier—not your email—as the account key, so an email change does not attach progress to the wrong person. Google may include other claims such as a name or profile image in its identity token; our application ignores and does not store those claims. We never receive your Google password.
The signed, HttpOnly session cookie contains the verified email, Google account identifier, and expiry time and lasts for up to seven days. The cloud database does not contain your email. Instead, the account identifier is converted to a private keyed hash and used as the storage key. The stored progress is limited to your selected exam, version, target, test date, practice-page path and title, skill, completion status, recent scored-attempt summaries, mistake-review schedule metadata, and update time. Exact answers, learner answers, explanations, essays, recordings, question content, and AI feedback are excluded. The mistake notebook keeps those exact review details only in your browser, even when cloud sync is connected.
Signing out removes the session cookie but keeps both local and existing cloud progress. "Delete cloud progress" permanently deletes the cloud copy, signs you out to prevent an immediate re-upload, and leaves the current browser's local copy unchanged. Cloud progress otherwise remains until you delete it.
AI scoring content
If you choose "Get detailed AI scoring," the practice question and the response you typed are sent toGoogle's Gemini API to generate an estimated score and feedback. We do notstore your response or the result on our servers — the request is processed and returned to your browser. Google processes the request underGoogle's Gemini API terms. Google's current terms distinguish paid and unpaid API services: for unpaid services, Google says submitted content and generated responses may be used to improve its products and may be reviewed by people; for paid services, Google says it does not use prompts or responses to improve its products. The service plan can change, so you should assume that Google may retain or review submitted content. Do not include personal, confidential, financial, medical, immigration, or other sensitive information.
Optional official-score feedback
After receiving an AI practice estimate, you may voluntarily tell us the score you later received on the real exam. If you submit this form, we store the scoring rubric, the practice estimate, your official score, an optional comment of up to 500 characters, and the submission date. This information is used only to evaluate and improve scoring accuracy and automatically expires after 180 days. It is not attached to your Google account. A separate IP-based anti-abuse counter expires after about two days. Do not put your name, candidate number, immigration details, or other personal information in the comment.
Quota counters (Cloudflare KV)
To keep AI scoring free and protect it from bots and cost spikes, we count scoring requests using yourIP address and shared hourly or daily totals. These are counts only—no response content or account identity—and they automatically expire after approximately one to two days. We do not use them to advertise to you or build a behavioural profile.
Anonymous product measurement
When you save a plan, start or finish practice, complete a diagnostic, or finish signing in, the site increments an aggregate daily counter. The event contains only the event name, exam and skill. It does not contain your page path, score, answer, essay, recording, email, account identifier or advertising identifier. Aggregate counters expire after 45 days. A short IP-based anti-abuse counter expires after about two hours and is not joined to the aggregate event or your account.
Server logs
Our host, Cloudflare, processes standard request metadata (such as IP address, timestamp, and browser type) to deliver and secure the site. SeeCloudflare's Privacy Policy.
Accounts are optional. Every practice tool still works without signing in. Sign-in exists only to sync the small progress summary described above; it does not unlock a paywall or upload your responses.
Cookies, local storage, and advertising
We use local storage to remember practice progress and your privacy choice. Signed-in users also receive the essential session cookie described above. Rejecting optional cookies does not block practice or sign-in. We donot currently load advertising. If advertising is enabled, it will be limited to selected long-form guides and served by Google AdSense. Active practice tests, diagnostics, tools, account, error, legal and policy pages are excluded from ad requests. A completed full mock or detailed AI score may show one manual ad only after its substantive result and feedback are visible. On eligible screens:
- Third-party vendors, including Google, may use cookies to serve ads based on your prior visits to this and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits. You can opt out of personalized advertising by visiting Google Ads Settings.
- Our local privacy choice prevents the site from requesting ads unless optional use is accepted.
- Before serving ads in the EEA, UK or Switzerland, TestDayTwin will also use a Google-certified consent management platform configured through AdSense; the local choice does not replace those regional requirements.
- You can also review options at aboutads.info/choices.
Who we share data with
- Cloudflare — hosting, security, quota counters, and signed-in progress storage.
- Google — identity verification when you choose Google sign-in, Gemini only when you request AI scoring, and AdSense if advertising is enabled in future.
Cloudflare and Google may process information outside Canada. Their handling is governed by their own terms and privacy policies. We do not sell or rent personal information and do not share progress with exam providers, schools, employers, or immigration authorities unless legally required.
Your choices and privacy rights
Depending on where you live and which privacy law applies, you may ask whether we hold personal information about you, request access or correction, or withdraw consent. Under PIPEDA, where it applies, individuals may request access to and correction of their personal information. Clearing your browser's site data removes the local copy. Signed-in users can delete cloud progress directly from the study plan. You can avoid AI processing by using standard local scoring only, and you can avoid calibration storage by not submitting official-score feedback. For another privacy request, contact us at the address below. We may need enough information to verify that the request relates to you.
Children
The general practice site is not directed at children under 13. Optional Gemini AI scoring is intended only for users aged 18 or older under Google's current Gemini API terms. Users under 18 should use the standard local practice and scoring features and must not submit content to the optional AI scorer.
Security
We use HTTPS, signed HttpOnly session cookies, strict server-side validation, and private keyed account hashes to reduce risk. No online system can promise absolute security. If we learn of an incident that creates a real risk of significant harm, we will respond as required by applicable law.
Changes to this policy
We may update this policy as the site evolves. Material changes will be reflected in the "Last updated" date above.
Contact
Questions about privacy? Email hello@testdaytwin.com. See also our Contact page.