Legal
Privacy policy
This page explains, in plain language, what Testlar stores and why. It covers accounts, tests, attempts and results.
Who we are
Testlar is operated by Solo Founder, who is the data controller for the personal data described here. You can reach us at support@testlar.com for any privacy question or request.
What we collect
Account details you give us (name, email, password hash), the tests and questions you create, and the attempts and answers you submit. We also keep basic technical logs (IP address, device and browser information, error reports) needed to run and secure the service, plus records of your credit balance and purchases.
How we use it and on what basis
To sign you in, show you the right tests in the right mode, score attempts, display results to you and the teacher who shared the test, and to run your credit balance — this is necessary to perform our contract with you. We use technical logs for security and fraud prevention and to improve the product, based on our legitimate interests. We send service emails (verification, password resets, receipts) to perform the contract and to meet legal obligations. We do not sell your data or use test content for advertising.
Payments and Merchant of Record
Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. When you buy credits, Paddle collects and processes your payment and billing data (card details, billing address, tax identifiers) directly in order to take payment, calculate tax, issue invoices and handle refunds. We never see or store your full card details; we receive only the transaction outcome and an order reference so we can add credits to your account. Paddle's handling of that data is described in Paddle's own privacy notice at paddle.com/legal/privacy.
Who else can see your data
Students see their own attempts and results. Teachers see participants and results for tests they created or shared. Beyond that, we share data with service providers acting on our instructions (hosting, database, authentication and email delivery), with Paddle as Merchant of Record for sales, billing and tax, with professional advisers where needed, and with authorities where the law requires it.
Retention
Tests, attempts and results stay available while your account is active. Deactivating your account hides your data from the app; deleting your account permanently removes your profile and sign-in credentials. Purchase and tax records are kept as long as the law requires. Data we no longer need is deleted or anonymised.
International transfers
Our providers may process data outside your country. Where that happens we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
Your choices and rights
You can update your name and password, deactivate your account, or delete it permanently from the account page in your dashboard. Depending on where you live you may also have the right to access, correct, delete, restrict or port your data, to object to processing, to withdraw consent, and to complain to your data protection authority. Email support@testlar.com and we will respond within one month.
Cookies
We use only essential cookies and local storage needed to keep you signed in and to run the checkout. We do not use advertising cookies. Clearing them signs you out.
Security
Data is stored with row-level access rules so accounts can only read what they are entitled to. Traffic is encrypted in transit and access to systems is restricted. No system is perfect, so report anything suspicious to us immediately.
Changes to this policy
If this policy changes in a way that affects you, we will update this page and note the date below. Continued use of Testlar after an update means you accept the revised policy.
Questions about this policy? Contact us.