Skip to content
ExamProMax

Privacy policy

This policy describes what data ExamProMax stores and why. It is written in plain language; if there is ambiguity, we err on the side of collecting less.

Public visitors

  • No account is required to browse exams, questions, mock tests or study resources.
  • We do not set advertising or tracking cookies for public visitors.
  • Theme preference is stored in browser local storage (key exampromax-theme) so the site remembers your light/dark/system choice. It never leaves your browser.
  • Linear practice state (current question, marked questions, selected options) is stored in session storage scoped to the current tab. It is cleared when the tab closes.
  • Mock test attempts create a server-side anonymous attempt record. The attempt token is stored hashed on the server; the raw token is placed in the URL bar so you can return to your result. No name, email, phone number or account is required.
  • Standard server logs may record the date/time of requests and the IP address as part of routine operations. These are used only for security and troubleshooting.

Administrators

Administrator accounts are created by an operator with database access. Administrator email addresses and password hashes are stored for authentication purposes. Audit logs record administrative actions and never include passwords or session tokens.

Third parties

ExamProMax does not embed third-party analytics, advertising networks or social trackers by default. Outbound links to official government websites are provided for reference; those sites have their own privacy policies.

Data retention

Mock test attempts are retained so their result pages continue to work. Anonymous attempts do not contain personal data. A retention-cleanup schedule can be applied by the operator; there is currently no fixed purge interval baked into the code.

Your choices

You can clear your browser storage at any time; this will remove your theme preference, practice progress and any locally stored result token references. Server-side attempt records remain accessible only via their original token, which you can discard by clearing your history.