This site is run by Rein (privacy@reinhardjoy.com), who is the data controller.
Your name and email, a hash of your password, when you agreed to this notice, your study progress (XP, flashcards, saved planning sheet), your exam attempts and answers, and any certificates you earn. The server also keeps short-lived technical logs (IP address, time, page) for security.
To run your account and sync your progress (contract), to grade your exam and let others verify your certificate (contract and your request), and to keep the service secure (legitimate interest).
Only the operator. A certificate's verify page is public by design: anyone with its ID sees the name, title, date and score printed on it. Nothing is sold or used for advertising. Email is sent through the operator's mail provider.
Until you delete your account. Deleting it removes your profile, progress, attempts and certificates; certificate links then show “not found”. Logs are kept up to 30 days.
Under the GDPR you can access, correct, export and delete your data, and object to processing. Use Account → Download my data and Delete account in the app, or email the operator. You can also complain to your data-protection authority (in Portugal, the CNPD).
The sign-up, login and password-reset forms use Cloudflare Turnstile to keep bots out. It checks your browser and IP address when you submit the form; Cloudflare's privacy policy applies to that check.
Only what's needed to work: a session cookie to keep you logged in and a security (CSRF) cookie. The app stores your progress in your browser's local storage so it works without an account and offline. When you sign up, that progress is copied to your account.