Privacy Policy

• To create an account we ask for a username, a password, and a display name. Nothing else. No real name, email, phone number, or address.
• If you do not log in, your practice history stays in your browser on your device and is never sent to our servers.
• We do not sell your personal information.
• You can delete your account and all of its data at any time from My page.

Account information (only if you sign up): username, password (stored only as a hash), and display name. We use it to log you in and identify your account.

Study records (only while logged in): questions answered with correct/wrong counts and dates, score history, your review list and notes, and certifications you add to your profile. We store these so your progress follows you across devices.

Automatically created information: the date you signed up, the date you were last active, and a count of failed login attempts (used to temporarily lock an account after repeated failures).

Problem reports: the question, the reason you picked, and any details you type. We do not record who sent a report. Please do not include personal information in reports or notes.

We use this information only to provide and secure the service and to fix reported questions.

Without an account, your practice history, review list, and display settings are stored only in your browser (on your device). They are not sent to our servers and we cannot see them.

• Clearing your browser's site data removes them.
• "Delete all records on this device" on My page removes them in one step.
• They do not appear on other devices or browsers.

We never store your password as you typed it. We store only a salted, one-way hash, so even we cannot read it. The token that keeps you logged in is also stored on our servers only as a hash. All traffic uses HTTPS, accounts lock for 5 minutes after 5 failed logins in a row, and passwords and login tokens are never written to logs.

No system is perfectly secure, but we collect very little so there is very little to lose.

We use:

• A login cookie to keep you signed in (only if you log in; up to 30 days).
• A language cookie to remember whether you chose English or Korean.
• Browser local storage for your practice history, review list, text size, and light/dark setting.
• Advertising cookies, when ads are shown. We use Google AdSense. Google and its partners may use cookies to show ads based on your prior visits to this site and other sites.

Your choices

1. Turn off personalized ads from Google at adssettings.google.com.
2. Opt out of personalized ads from many other ad companies at aboutads.info/choices.
3. Block or delete cookies in your browser settings. Practice still works with cookies blocked, though you may not stay logged in.

We do not pass your username, display name, or study records to advertisers.

We do not sell or rent personal information, and we share it only with the providers that run the site:

• Cloudflare, Inc. hosts the site and the account database. Account information and study records are stored on Cloudflare's infrastructure, and Cloudflare processes connection data such as IP addresses to deliver and protect the site.
• Google LLC (Google AdSense) serves advertising, as described above.

We may also disclose information if required by law.

• Account information and study records: until you delete your account. Deletion is immediate.
• Login sessions: up to 30 days, or until you log out.
• Failed login counts: cleared when you log in successfully or delete your account.
• Problem reports: contain no information that identifies you and are kept to maintain question quality.

• See your data: My page shows the records stored for your account.
• Correct it: you can edit or remove your notes and the certifications on your profile.
• Delete it: choose "Delete account" at the bottom of My page. Your account, study records, review list, and login sessions are permanently removed from our servers right away.
• Device records: logging out clears the records on that device. If you never logged in, use "Delete all records on this device" on My page.

Depending on where you live (for example, California), you may have additional rights to know, correct, or delete personal information and to not be discriminated against for using those rights. To make a request, email exampasso123@gmail.com. Because we do not hold your email or phone number, we may ask for your username to confirm the account is yours.

We do not sell personal information and do not share it for cross-context behavioral advertising beyond the advertising cookies described above, which you can turn off using the choices listed there.

ExamPasso is intended for adults preparing for professional exams. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

If we change this policy, we will post the new version here and update the date below.

Questions or requests: exampasso123@gmail.com

Effective date: October 2, 2026