Privacy Policy

Last updated: June 2026

1. Who we are

ExamPass CY is operated by an individual based in the European Union. For all privacy and data-related enquiries, contact us at: support@exampasscy.com

This policy will be updated once a legal entity is formally registered.

2. What data we collect and why

Account data

When you create an account, we collect your email address. This is required to provide access to purchased products and to send transactional emails (order confirmation, password reset). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Payment data

Payments are processed by Stripe, Inc. We do not store your card details. Stripe may process personal data in accordance with their own privacy policy. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Usage data (analytics)

With your consent, we use Google Analytics 4 to collect anonymised information about how visitors use this site (pages visited, session duration, country). This data does not identify you personally. Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time via the cookie settings banner.

Technical data

Our hosting provider (Vercel) automatically processes IP addresses and request logs for security and performance purposes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Cookies

We use the following types of cookies:

  • Essential cookies — required for authentication and secure checkout (Supabase session, Stripe).
  • Analytics cookies — Google Analytics 4, only set with your consent.

You can accept or reject non-essential cookies via the banner shown on your first visit. You may change your preference at any time by clearing your browser cookies and revisiting the site.

4. Data processors

We share your data with the following third-party processors:

  • Supabase — database and authentication hosting (EU region where available)
  • Stripe, Inc. — payment processing
  • Vercel, Inc. — website hosting
  • Google LLC — analytics (only with consent)

All processors are subject to data processing agreements and, where applicable, Standard Contractual Clauses for transfers outside the EEA.

5. How long we keep your data

  • Account data — for as long as your account is active, plus 2 years
  • Payment records — 7 years (legal obligation)
  • Analytics data — 14 months (Google Analytics default retention)

6. Your rights

Under GDPR, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Portability — receive your data in a portable format
  • Objection — object to processing based on legitimate interest
  • Withdraw consent — at any time, for consent-based processing

To exercise any of these rights, contact us at support@exampasscy.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Cyprus data protection authority: Office of the Commissioner for Personal Data Protection (ODPC).

7. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

8. Contact

For any privacy-related questions: support@exampasscy.com