Privacy policy

In short

• There are no accounts. We do not ask for your name, email or phone to use the app.
• We use only strictly necessary cookies for logging in. No analytics or advertising cookies.
• Your progress (statistics, simulation history, review) is linked only to your access code, so you see it on all your devices.
• You can try the app without a code (demo): then we keep nothing linked to you; we only count answers per question anonymously.

1. Controller

The controller is [Company name], VAT/CUI [CUI], Trade Register no. [J..], registered office [address]. Contact: contact@examenarme.ro.

2. What we process and why

• The access code, stored only as a cryptographic hash, never in clear. Purpose: checking access.
• Device identifier and session (cookies __Host-ea_dev and __Host-ea_sess), the browser type (user agent) and the time of last use. Purpose: the device limit and keeping you logged in.
• Simulations taken: the questions you got and the answers you chose, linked to the code. Purpose: marking, history and varying questions between simulations.
• Your answers (practice and simulations), linked to the code: progress by topic, mistakes, review and the "Are you ready?" estimate. Purpose: showing your progress on all your devices.
• Question statistics from the same answers: which questions are often wrong. Purpose: finding unclear questions. Used only in aggregate, never per person.
• Partners (course organisers who gave you the code) see only whether and when the code was used and group results, never your answers.
• Reports you send ("Report a problem"): your message, the question and the code. Purpose: fixing content. Please do not write personal data in the message.
• IP address, used briefly for anti-bot protection (Cloudflare Turnstile) and for limiting code attempts. We do not store it in our database.

Legal basis: performing the service you asked for (Art. 6(1)(b) GDPR) and our legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR).

3. How long we keep data

• Sessions expire after 30 days without use and are deleted automatically.
• Individual simulations and answers are deleted automatically after 12 months.
• Progress per question stays while the code is valid. You can delete it at any time in Progress → "Reset progress".
• Resolved or rejected reports are deleted automatically after 12 months.
• The code hash and its devices stay while the code is valid. On request, we delete them sooner.

4. Who else has access

The app runs on Cloudflare, Inc. infrastructure (hosting, database, anti-bot protection), acting as processor. Cloudflare may process data outside the European Economic Area under the safeguards provided by the GDPR (standard contractual clauses / EU-US Data Privacy Framework). We do not sell data or share it for marketing.

5. Data in your browser

The browser keeps a copy of your progress (localStorage) so the app loads quickly, plus your test settings and language. You can remove them by clearing the site's data in your browser.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. Write to contact@examenarme.ro and tell us the code (or its first characters) so we can find the data. You may also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).