Privacy Policy

This Privacy Policy explains what data Kanda & Batata Practice Tests (this website) collects, why, and how it is protected. We built this site to be as privacy-friendly as possible: there are no accounts, no advertising and no tracking.

1. What we store about you

a. Server session (this website)

While you use the site we keep a secure session on the server that holds only your in-progress quiz state (which questions are in your quiz, your answers and your score) and a security token. The session is anonymous — it is not linked to your name, email or any other personal data — and it expires automatically when your browser session ends (typically after 2 hours of inactivity).

b. Your browser (localStorage)

To preserve your quiz progress if you refresh the page, and to power the "questions I haven't answered before" and "questions I got wrong before" filters, we store a small, anonymous list of question numbers in your browser's local storage. This data never leaves your device. You can clear it at any time by clearing your browser's site data.

c. Contact form messages

If you send us a message through the Contact page, we store the name, email address and message you provide so we can respond. We do not sell, share or use it for marketing. We rate-limit the form to 3 messages per hour per visitor to prevent abuse.

2. What we do NOT collect

• No account data — there is no registration and no login.
• No personal profiles, no marketing lists, no tracking pixels.
• No analytics that identify you. Standard, anonymous server access logs (IP address, request time, page requested) may be kept for security and troubleshooting, as on virtually every website.
• No cookies beyond the functional session cookie described above.

3. Cookies

We use a single session cookie to keep your quiz session secure. It is flagged HttpOnly and SameSite=Lax (and Secure over HTTPS) so that scripts on your browser cannot read it and cross-site request forgery is mitigated. It contains no personal data other than an anonymous session identifier.

4. Security

All communication is protected with HTTPS/TLS. Sessions use cryptographic tokens, all form posts are validated and protected against cross-site request forgery, all output is escaped to prevent cross-site scripting, and configuration and data files are not accessible from the web.

5. Your choices

You can use this website without providing any personal information at all. To remove the quiz progress stored in your browser, clear your browser data for this site. To ask us to delete a contact message, use the contact form and we will take care of it.

6. Changes to this policy

If we change how we handle data, we will update this page and the date above. Questions? Contact us via the Contact page.