Last updated: 7 November 2026
Browsing and practising
You can browse subjects, read explanations, and practise questions without an account. A hosting provider receives the technical information needed to serve a page, such as an IP address, request time, browser information, and the requested URL. Operational logs may be kept by hosting or database providers for security and troubleshooting.
Question content is public. Your private exam access token, contact details, and account credentials should never be shared in a page link or support message.
Browser storage and cookies
- Guest bookmarks and practice preferences use browser storage. Local progress, saved mistakes, and active sessions can remain on the same device so you can return to your work.
- An active exam may be stored for recovery after a refresh. If you choose to remember your participant details, your name and contact are also stored in that browser.
- Theme preferences are stored on your device. Signing in uses authentication cookies, including HTTP-only cookies, to keep the session available to the server.
- Clearing site data removes locally stored records and preferences. It does not delete a record already saved to the server or to an account.
On a shared device, sign out and clear site data after use. Local browser storage is not a secure place for sensitive information.
Optional accounts and saved questions
If you create an account or sign in, the authentication provider processes the details needed for that sign-in. Where account sync is available, saved question identifiers are associated with your account so you can access them on another device. Guest bookmarks can be merged into the account collection when you choose to sync.
Your account collection is private, not a public profile. Signing out does not delete your account or its cloud records. Local guest data may remain separate on the device.
Exam attempts and the leaderboard
Guest exams can be started without a name, phone number, or email. Any details you choose to provide are stored with the exam configuration, answers, timing, and result. Signed-in exams use your profile details and are linked privately to your account so they appear in your exam history. Authorized administrators can review exam records.
Leaderboard participation is optional. When you opt in, the public leaderboard shows your first name and exam performance, not your contact details. A practice score is not an official exam result.
Profiles and practice progress
Your editable profile stores your name, optional phone, contact email, institution, target exam, and avatar URL. It is private to your account; an avatar URL may load an image from its host when displayed. Your profile email is a contact field and does not change your sign-in credentials.
Practice answers are checked on the server. Signed-in answer events and exam attempts support your lifetime accuracy and daily practice goal, measured in Bangladesh time. Guest practice progress is kept on this device, not presented as synced cloud history.
Public discussions and helpful votes
A posted comment, displayed author name, reply, and helpful count are public. Signed-in comments use your profile name; guests choose a name. Do not include phone numbers, email addresses, passwords, or other sensitive information in comments. Moderators can remove inappropriate comments and their replies.
A signed HTTP-only cookie identifies a guest browser for helpful votes for up to one year. The server stores a hashed voter identifier, not a public account ID. Clearing cookies resets the browser identity but does not remove an already posted comment. Contact us to request review of a public contribution.
Question reports and contact messages
A question report stores the question identifier, reported issue, and any correction or optional name and contact details you submit. You can report a question without giving your name.
The contact form stores your name, email address, subject, message, submission time, and inbox status. These messages are private to authorized administrators and used to review requests and provide support. Sending a message does not subscribe you to marketing or automatically send an email.
Abuse prevention uses request-rate limits and a spam-trap field. Technical request information may be processed for those checks. Do not include passwords, national ID numbers, payment details, or other unnecessary sensitive information.
Service providers, advertisements, and analytics
Hosting and database or authentication providers process data required to run the service. When Supabase is configured, it supplies database and authentication services. Access is limited through server authorization and database policies; no internet service can guarantee absolute security.
The application does not currently include advertising or third-party analytics scripts. Fonts are served with the site. If advertising or additional tracking is introduced, this policy should be updated to describe it and any choices required before that processing begins.
Retention, corrections, and deletion
Browser records remain until you remove them, clear site data, or the browser clears them. Server records are retained until removed by the operator; an automatic deletion schedule is not currently provided. Hosting logs and backups follow the relevant provider’s retention settings.
Use the contact form to request access, correction, or deletion of a server-side record. Include enough information to locate it without sending new sensitive documents. Ownership may need to be verified before a private record can be changed. Do not send your password.
Questions and policy changes
The date above identifies this version. Changes to the service may require changes to this policy. If you are unsure how a feature handles your information, ask before submitting it.