Privacy notice
Draft for launch preparation. Operator, contact, and applicable policy details still need to be completed before paid launch.
Who operates this service
Operator name, country, business address, and privacy contact: to be confirmed. This draft describes the application’s current data handling; it is not the final notice for a paid launch.
Information used by ORE Q Bank
We store your name, email, password hash, access status, study sessions, answers, scores, progress, and question flags to provide your account and learning history. Passwords are stored as hashes, not readable passwords. Session cookies authenticate requests. IP addresses are used for abuse prevention and may appear in infrastructure logs.
Storage and service providers
Account and study records are stored on the application host, alongside the question bank and temporary login and abuse-prevention records. Traffic passes through Cloudflare. Encrypted backups are uploaded to Google Drive. Hosting-provider identity, processing locations, international-transfer details, and relevant agreements still need to be documented.
Retention and deletion
Account and study records remain until deletion. You can permanently remove your live account and personal study records from Account management. Encrypted backups may retain copies for up to seven days. Authentication cookies are set for up to seven days; rate-limit windows expire automatically. Infrastructure-log retention and a process for handling deletion requests after a backup restoration still need to be finalized.
Your choices
You can sign out everywhere or delete your account in Account management. Password reset and email changes are currently unavailable while email delivery is being prepared. A staffed contact channel and procedures for privacy requests will be published on Contact and support.
Before this notice is finalized
The operator must specify applicable legal bases, rights and complaint routes, retention periods, processing locations, and provider details for the countries served. No payment-card collection or marketing signup is currently implemented. See the cookie and session notice.