PPrepSim

Privacy Policy

Effective: 2026 · Last updated: 1 October 2026

This policy explains what PrepSim collects, why it is used, and the choices available to you. The service is operated by Attinder Dhillon.

Information handled

PINs and email verification codes are not stored in readable form. Email is used for verification, recovery, security notices and optional reminders about unfinished tests, not general marketing. New accounts start with resume reminders enabled; you can disable them in Account settings or unsubscribe from any reminder. At most two automatic reminders are sent per unfinished test: one the next day and one final reminder a week later. Reminders stop when the test is completed, discarded or expired. Some session and test state is stored in your browser so an interrupted attempt can be resumed. PrepSim records the version and time of any response-processing notice you accept when a new assessed attempt starts.

Candidate recordings, written responses (including essays), submitted answers and transcripts are stored privately for 30 days after submission, or 30 days after creation for an unfinished attempt. They are then removed automatically. Grading retries do not extend this period. Scores and feedback remain with your account until account deletion; submitted content and direct evidence excerpts are removed from retained assessments. Exported recovery backups exclude submitted content. Responses may be processed by PrepSim and its assessment providers to produce practice feedback. You can request account deletion or delete available recordings earlier.

To operate the service, PrepSim records a short-lived first-party activity record: the page or test, a safe action label (such as starting or submitting a test), device category, country code and time. For signed-in users, the IP address seen by Cloudflare, country, device category and browser user-agent are also recorded at registration and when an exam attempt starts. Country is taken from Cloudflare request metadata; PrepSim does not send IP addresses to a separate geolocation provider. These registration and latest-attempt details are available only in the private operator dashboard and are retained for up to seven days. PrepSim does not record answer content or typed responses in this activity record.

To understand how candidates find PrepSim, your browser remembers the first visit source for up to 30 days. On registration we save that source and the signup visit source with your account: external referring hostname and approved campaign labels (utm_source, utm_medium, utm_campaign). Full referring URLs and search terms are not retained. These records remain private to the operator, are summarized in acquisition reports and are deleted with your account. Browsers may hide sources, so attribution can be incomplete.

For all visitors, including those not signed in, the live activity view keeps the current Cloudflare-provided IP address, browser user-agent, available referring hostname, campaign source and current page or test-stage labels in temporary presence storage for up to 90 minutes after the latest heartbeat. Full referrer URLs, answer text and advertising click identifiers are not stored in this view. Referrers may be hidden by browsers, so an unknown source does not necessarily mean a direct visit. These details are refreshed during activity, automatically cleared and shown only to the operator. Signed-out visitor details are not copied into the seven-day registration or exam audit records.

Why it is used

Information is used to authenticate accounts, deliver and score tests, save results, operate rankings, restore attempts, schedule reminders in your chosen timezone, improve questions, respond to reports and prevent abuse.

Public rankings

Nicknames and best scores appear in exam rankings by default. You can switch ranking visibility off before a test or from the test menu. Opting out removes your results from public rankings; it does not delete your private results.

Analytics and service providers

PrepSim uses first-party traffic and activity analytics, not Google Analytics. Aggregate successful page loads are recorded by our Cloudflare Worker using a page label, approximate device category, country and referring hostname. This traffic record does not store IP addresses, cookies, visitor identifiers, full browser user-agents or full referring URLs. Counts describe page loads, not unique people; bot classification is approximate and missing sources are reported as direct or unknown. Private administration, review and result routes are excluded. Cloudflare may sample traffic measurements. The separate short-lived activity and account audit records are described above.

PrepSim is delivered using Cloudflare services, including private object storage for test media. Amazon Simple Email Service processes transactional account and resume-reminder email and reports delivery, bounce and spam-complaint events so further mail to problematic addresses can be stopped. Speaking and Writing responses are processed by PrepSim's assessment service and the assessment providers configured for the task; the provider may change as availability and service terms change.

Retention and deletion

Account, result, report and security data is kept only as reasonably necessary to operate and protect the service, maintain rankings, resolve reports and meet legal obligations. You may request deletion of your account and associated data at mail [at] aynadhillon [dot] com. Enough information may be requested to verify that the account belongs to you.

Young users

You must be at least 14 to use PrepSim. If you are under the age at which you can independently consent to online services where you live, use PrepSim only with permission from a parent or guardian. Parents or guardians may contact PrepSim about a young user's data or request deletion.

Security, changes and contact

Reasonable technical safeguards are used, but no internet service can guarantee absolute security. This policy may change as the service develops; material updates will be posted here. Privacy and deletion requests can be sent through the contact page or to mail [at] aynadhillon [dot] com.