Privacy Policy

Who we are

PassPart66 is an independent, UK-based sole-trader project. This policy explains what personal data we collect through the site, why, and what rights you have over it.

What we collect

• Your account email address and password. Your password is handled directly by our authentication provider, Supabase — we never see or store it in plain text.
• Your exam attempt history: module, submodules, question count, timing, answers, and scores, so you can track your own progress and resume in-progress attempts.
• Security event logs: successful and failed login attempts (including the email address used, even for failed attempts), session/device changes, an approximate (city/country-level) location, IP address, and device/browser type.

Why we collect it

Your account and exam history are processed to provide the service you've signed up for — logging in and showing you your own progress. Under UK GDPR, the lawful basis for this is performance of a contract. Security event logs are processed under our legitimate interest in keeping accounts secure and preventing abuse (for example, detecting repeated failed login attempts).

What we don't do

We do not sell or share your personal data with third parties for their own purposes. We do not use advertising trackers. We do not send marketing emails unless you separately opt in to them.

Where your data is stored

Your data is stored with Supabase (database and authentication, region: London, UK (AWS eu-west-2)) and the site itself is hosted on Vercel, which also supplies approximate location data for security logging via its edge network. Both act as data processors on our behalf under their own security and compliance commitments.

Cookies and local storage

We use only strictly necessary cookies and local storage — nothing for advertising or analytics:

• Supabase's authentication session cookies, to keep you logged in.
• Our own session-tracking cookie, used to enforce the two-device sign-in limit and to power "sign out other devices".
• A light/dark theme preference saved in your browser's local storage — this never leaves your device.

How long we keep it

Account and exam history data is kept for as long as your account exists. Security event logs are automatically deleted after 90 days. If you delete your account, your profile, exam history, active sessions, and identifiable security records are deleted immediately along with it.

Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data. You can delete your account and all associated data at any time from the Account page. For any other request, or to raise a concern, contact us at support@passpart66.com. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Changes to this policy

We'll update this page if what we collect or why ever changes, and update the effective date above.