Privacy Policy

Last updated 29 October 2026. This page explains, in plain language, what PrepRung stores about you and why.

Using PrepRung without an account

You don't need an account. Without one, your answers, scores, paused tests, notes and bookmarks are saved only in your own browser (local storage) and are not sent to us. Clearing your browser data removes them.

If you create an account

An account is free and optional. It lets you see your progress on any device. We store:

• Your name and email address, used to sign you in and, if you write to us, to reply.
• Your password, never in readable form: we keep only a salted, one-way hash (PBKDF2-SHA256), so nobody, including us, can see it.
• If you use “Continue with Google”: your name, email address and Google account ID, which Google shares with us when you agree. We never see your Google password and get no access to your Gmail, Drive or contacts.
• Verification and password-reset emails are sent through Resend (our email provider) to the address on your account. Codes are stored only as one-way hashes and expire after 15 minutes.
• Mock results: for each finished mock, the exam, paper, score, correct, wrong and skipped counts, time taken, and a section-wise summary.
• Notes, saved items and progress you choose to keep: your notes on a page, your bookmarks, and chapters or labs you mark as done.

When you sign in for the first time on a device that already has saved mocks or notes, we ask before copying them to your account.

This data is stored with Cloudflare (our hosting provider) in its D1 database. We use it only to show it back to you. We don't sell it, share it with advertisers or use it to profile you.

Cookies

• pr_session: set only when you sign in. It holds a random session key so you stay signed in. It can't be read by page scripts. With "Keep me signed in" it lasts 30 days; otherwise it ends when you close the browser (and expires on our side after a day).
• pr_in: set alongside it with the value 1 and nothing else. It just tells the page you're signed in so it can show your account menu; signed-out visitors don't have it.
• Both are removed when you sign out. Google Analytics and Google AdSense may set their own cookies (see below).

Contact messages

When you use the contact form, we store your name, email, topic, message and the page you were on, so we can reply and fix reported mistakes. The message is also forwarded to our team inbox by email. To limit abuse we keep a one-way hash of your IP address, never the address itself. We delete contact messages when they are no longer needed.

Analytics

We use Google Analytics to count visits and see which papers and pages are used, so we know what to improve. Google Analytics uses cookies and collects information such as pages viewed, approximate location, device and browser. It does not receive your account details, notes or scores. You can opt out with the Google Analytics opt-out add-on.

Advertising

We may show ads served by Google AdSense. Google and its partners use cookies to serve ads based on your previous visits to this and other websites. You can turn off personalised advertising at Google Ads Settings, and learn more at How Google uses information from sites that use its services. Ads are never shown inside a test.

Your rights: see, download, correct, delete

• See and download everything in your account from My dashboard → Settings → Download my data (a JSON file).
• Correct your name in Settings, and edit or delete any note or saved item at any time.
• Delete your account in Settings. This immediately and permanently deletes your account, mock history, notes, saved items, progress, sessions and any contact messages linked to your account.
• For anything else, including a forgotten password, contact us.

Security

The site is served only over HTTPS. Passwords are hashed, session keys are stored only as hashes, and sign-in and contact attempts are rate-limited.

Children

Many exam aspirants are under 18. Accounts collect only what is described above. Parents or guardians can contact us to see or delete a child's account.

Contact

Questions about this policy: hello@preprung.com or the contact form.