Privacy Policy
Last updated: August 14, 2026
This policy applies to the englishtest-online.com website and the English Test Online mobile application (together, the "Services"). It explains what personal data we collect, why we collect it, how advertising providers may process data, and the rights you have — including rights under the EU General Data Protection Regulation (GDPR).
What we collect
- Account data — username, email address and a hashed password when you create an account.
- Profile details you choose to add — a short bio, your country, your goal level, links to your own pages (e.g. a YouTube channel) and which badges you showcase. All of these are optional, you can edit or clear them at any time, and anything you fill in is shown on your public profile.
- Learning activity — test attempts, scores, streaks, badges, comments and likes tied to your account.
- Google sign-in data — if you choose "Continue with Google", we receive your email address and a Google account identifier so we can create or find your account. We never receive your Google password, and we ask Google for nothing else.
- Website analytics — usage statistics via Google Analytics, subject to your regional consent choices.
- Website advertising — advertising and measurement data processed by Google AdSense.
- Mobile-app advertising — the Google Mobile Ads SDK (AdMob) may process IP address, approximate location derived from IP, app- or device-bounded identifiers, advertisements viewed, interactions with advertisements and the app, and performance, crash or other diagnostic information. These categories are used to deliver and measure ads, limit how often an ad appears, detect fraud and abuse, and improve advertising and SDK performance.
What we do NOT do
- We never sell your personal data.
- Your email address is never shown publicly — only site administrators can see it.
- We do not send your email, username, test answers, scores or learning history to AdMob for ad selection.
- Your public profile shows only what you provide plus your username, join month, learning statistics and badges. Privacy settings on your profile let you hide your statistics, your level, your recent activity, your leaderboard entry, or the whole profile page.
Website cookies, analytics and AdSense
We use a strictly necessary cookie for sign-in sessions and, with your consent, analytics and advertising cookies. Consent is collected through Google's certified consent management platform and applied using Google Consent Mode: until you agree, Google Analytics and Google AdSense store nothing on your device — Analytics receives only anonymous cookieless signals and AdSense serves only non-personalised ads chosen from the page content rather than from your interests. You can change or withdraw your choice at any time with the Cookie settings link in the footer. See the Cookie Policy for the full detail. Refusing costs you no functionality.
Google acts as an independent controller for the data it processes as an advertising provider. See Google's partner-sites notice and manage your ad settings at Google My Ad Center.
Advertising in the mobile app (AdMob)
The mobile app uses Google AdMob, delivered through the Google Mobile Ads SDK, to show non-personalised banner and interstitial advertisements. Non-personalised advertisements are not selected from a history of your interests, but Google may still use limited local storage or device/app identifiers where permitted for ad delivery, frequency capping, aggregated reporting, security and fraud prevention.
In regions where consent is required, the app uses Google's User Messaging Platform (UMP) before requesting advertisements. You can review or withdraw an available advertising choice from More → Advertising Privacy Choices in the app. Declining consent does not prevent you from using lessons, tests, results or account features; Google may serve limited ads where legally permitted, or no ad may be available.
The current iOS version does not request Apple's App Tracking Transparency permission and does not request access to the advertising identifier (IDFA) for cross-app tracking. If we introduce personalised advertising or another practice that requires tracking permission in a future version, we will request the required permission and update this policy before that change takes effect.
Google describes how the Mobile Ads SDK may collect and use information in its iOS data disclosure and partner sites and apps notice.
Legal bases (GDPR)
- Contract — processing account and activity data to provide member features.
- Consent — analytics and advertising storage or processing where consent is legally required, and any optional profile details you add.
- Legitimate interest — service security, abuse and advertising-fraud prevention, technical ad delivery and aggregated measurement where permitted by law, and funding free learning content.
Processors and transfers
We use Supabase (database hosting), Hostinger (application hosting), Mailtrap (verification and password-reset emails), Apple (optional Apple sign-in) and Google (Analytics, AdSense, AdMob and optional Google sign-in). These providers may process data in countries outside your own. Where applicable, international transfers are protected through recognised safeguards such as adequacy decisions or the European Commission's standard contractual clauses.
Your rights
You may request access to, correction of, or deletion of your personal data at any time. Members can request full account deletion from their profile page — an administrator reviews and permanently removes the account and all associated data. You can also email infoverse.team@gmail.com. If you are in the EU, you additionally have the right to lodge a complaint with your local supervisory authority.
Data retention & security
Account data is kept while your account is active and deleted when your deletion request is processed. Passwords are stored only as salted bcrypt hashes. Data is hosted on servers with industry-standard security controls. Google controls retention of information it processes through AdSense and AdMob under its own policies; advertising privacy choices and Google My Ad Center provide additional controls where available.
Children
The Services are not directed at children under 16 and we do not knowingly collect their personal data.
Changes
We will update this page when our practices change; the date above always reflects the latest revision.
