Privacy Policy

1. Who is responsible

The data controller for maritimetest.com is MaritimeTest, operated from Moldova. For any privacy question or request, write to support@maritimetest.com.

2. What we collect

• Account data: your email address and a hashed password. If you sign in with Google, we receive your email address and basic profile identifier from Google.
• Purchase data: which product you bought, amount, currency, order status and the PayPal transaction identifiers. We never receive or store your card details — payment happens entirely on PayPal.
• Usage data: which tests you opened or downloaded, your search queries, and whether a free trial has already been used. With your consent we also record anonymised session data (clicks, scrolling and pages viewed) to understand how the site is used.
• Technical data: a hashed version of your IP address and browser identifier, used for rate limits and to prevent abuse. We store the hash, not the raw address, for these purposes.
• Data stored on your device: your session, downloaded tests for offline study, your progress and theme preference. This stays in your browser (IndexedDB and local storage).

3. Why we use it

• to create and secure your account and give you the access you paid for;
• to deliver tests for offline study and remember your progress;
• to process payments and handle refunds;
• to prevent abuse — for example one free trial per person, limits on free searches, and protection against automated copying of the materials;
• to answer your support requests;
• to understand which tests and pages are useful so we can improve the content.

Depending on your country, our legal bases are performance of a contract (giving you access), our legitimate interest (securing the Service and preventing abuse), and — where required — your consent (for example for analytics cookies). We do not sell your personal data.

4. Cookies and local storage

We use essential cookies and local storage to keep you signed in and to store downloaded tests for offline use. These are required for the Service to work.

If analytics is enabled, it sets its own cookies to measure visits and purchases. Where your country requires it, analytics cookies are only set after you agree. Session recordings are loaded only after you agree and are never started before that.

5. Who processes data for us

• Supabase — database, authentication and server functions (EU region, Frankfurt).
• PayPal — payment processing, subscriptions and refunds.
• Cloudflare — website hosting, content delivery and support email routing.
• Google — optional sign-in with Google, and analytics when enabled.
• Microsoft — session analytics (Clarity) when enabled and you have agreed.

These providers process data on our instructions and under their own security obligations. Some of them may process data outside your country, including in the United States, under the safeguards their agreements provide.

6. How long we keep it

• Account and access records: while your account exists, and afterwards as required for accounting and dispute handling (normally up to 5 years for financial records).
• Search and download logs: kept in limited form for abuse prevention and statistics.
• Data on your device: until you delete it, clear your browser storage or uninstall the app.

7. Your rights

You can ask us to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. Email support@maritimetest.com and we will respond within the period required by your local law.

Deleting your account removes your profile, your access records and the offline copies on your device. Records we must keep for accounting or dispute purposes are retained as required by law. You may also complain to your local data protection authority.

8. Children

The Service is intended for professional seafarers and is not directed to children under 16. We do not knowingly collect data from them; if you believe a child has created an account, contact us and we will remove it.

9. Changes

We may update this policy as the Service develops. The current version is always published here with the date shown above.