How Questena handles data.
Questena works without an account, but it still needs a small amount of pseudonymous and technical data to remember practice, build plans, and keep the service reliable.
Who operates Questena
Questena is the operator of this service and the controller responsible for the processing described here. The public contact is [email protected].
What stays in your browser
Questena stores a random browser identifier so this browser can retrieve its attempts, mistakes, and plan. It also stores your theme choice, a first-party language preference cookie, and, during production checks, a session-only canary marker. Clearing site data removes these local keys and may make earlier progress impossible to retrieve from that browser.
Practice and plan records
Questena stores the pseudonymous browser identifier with the selected test and mode, answers, scores, timestamps, mistakes, plan topics, and an exam date when you choose to build a plan. The current service does not ask participants for a name, account, email address, postal address, or payment details.
Privacy-preserving analytics
Self-hosted Umami records cookieless, anonymized information such as pages, public test slugs, referrer, browser, device category, country-level location, and bounded product events. It respects Do Not Track. Questena does not connect an analytics visitor to the browser identifier used for practice.
Reliability and security data
Sanitized browser telemetry and backend observability may include exceptions, Core Web Vitals, release and route information, aggregate metrics, and error logs. Questena does not use session replay, capture form values or answer text, collect console output, or send request and response bodies to browser telemetry.
Technical request information
Hosting, content-delivery, security, and observability providers necessarily process limited request information, including an IP address and user agent, to deliver and protect the service. Questena does not add those values to product analytics event properties.
Why and on what basis
Practice records are processed to provide the service you request. Security, reliability, troubleshooting, and privacy-preserving aggregate analytics support Questena's legitimate interests in operating and improving the service, subject to applicable law and your rights. Data may also be processed when required by law.
Sharing and international processing
Questena does not sell personal information and does not run behavioural advertising. Data is shared only with providers that host, deliver, secure, or monitor the service, or when legally required. Those providers may process data outside your country under their applicable safeguards.
How long data remains
Browser preferences remain until you change them or clear site data. At launch, server-side attempts, answers, plans, and events have no automatic expiry. Questena keeps them until they are deleted after they are no longer needed for returnable progress, service integrity, aggregate analysis, troubleshooting, or legal obligations.
Your choices and rights
You can clear browser data, use Do Not Track, or stop using Questena. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and may complain to a relevant supervisory authority. Because there is no account or name, Questena may need the browser identifier or other information sufficient to locate records and reasonably verify the request.
Children
Questena does not request age or direct participant identifiers. Anyone who cannot agree to this notice under applicable law should use Questena with a parent or guardian. A guardian may contact Questena about a minor's data.
Changes to this notice
When this notice changes materially, Questena will publish the revised text with a new effective date. The current version is the one available on this page.