Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data CheapMocks collects, why, and what rights you have. We collect as little as we need to run the service.
Who is responsible
The data controller is Faith In Fitness Sebios, organisation number 930 613 932, Skogveien 18 B, 1433 Ås, Norway. Contact: support@cheapmocks.com.
What we collect
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address; if you use Google sign-in, also your name and profile picture from Google | To create your account and sign you in | Contract (Art. 6(1)(b)) |
| Purchases: product, date, amount, country and the Paddle transaction reference | To give you access to what you bought and handle refunds | Contract; legal obligation for accounting records (Art. 6(1)(c)) |
| Name and email address, after your first purchase | To send you an order email and let Trustpilot invite you to review us | Legitimate interests (Art. 6(1)(f)): asking customers for honest feedback |
| Your study data: answers, scores, time spent per question, flagged questions, bookmarks and notes, and the exam date you enter | To score your mocks and practice, show your reports and progress, and let you review past attempts. Stored with your account | Contract |
| Answer statistics per question, combined across all users | To find and fix questions that are unclear or wrong, and to show how your score compares with other users (only as aggregated numbers) | Legitimate interests (Art. 6(1)(f)) |
| Mock scores of guests: when you take the free mock without an account, your score per session and your answers, linked only to a random id kept in your browser's local storage (no name, email or cookie) | To include every candidate in the score comparisons and the answer statistics per question | Legitimate interests (Art. 6(1)(f)) |
| Error reports and feedback you send us, with your account email | To check and fix questions, and to improve the site. We only quote feedback on the site if you ticked the box allowing it | Legitimate interests; consent for quotes (Art. 6(1)(a)) |
| Anonymous visit statistics: pages viewed, referring site, country, browser and device type | To understand which pages are useful. Collected by Vercel Web Analytics without cookies and without identifying you | Legitimate interests |
| Course activity: pages and lessons you open, lessons you complete, how far you watch each video, flashcard reviews, practice and mock sessions you start or finish, searches on the site, when you reach a locked page, and the kind of device (phone, tablet or computer). Linked to your account when you are signed in; otherwise only to a random id that lasts while the browser tab is open (no cookie) | To see which lessons, videos and features help people and where they get stuck, so we can improve the course. Only we see it; it is never used for advertising | Legitimate interests (Art. 6(1)(f)) |
| Technical data: IP address, browser type, time of request | To keep the site secure and working, and to prevent abuse | Legitimate interests (Art. 6(1)(f)) |
| Emails you send us | To answer your questions and requests | Legitimate interests |
We never see or store your card details. Payments are handled entirely by Paddle.
Who we share data with
- Paddle (Paddle.com Market Ltd, UK) — our reseller and Merchant of Record. Paddle processes your payment and billing details as an independent controller under its own privacy policy.
- Supabase — stores accounts and purchase records (servers in the EU).
- Vercel — hosts the website and provides cookie-free visit statistics.
- Resend — sends sign-in emails and order emails.
- Trustpilot (Trustpilot A/S, Denmark) — after your first purchase we send you an order email with Trustpilot's invitation address in copy, so Trustpilot can invite you to review us. Trustpilot receives your name and email address for this and handles invitations and reviews as an independent controller under its own privacy policy. The invitation is optional; you can ignore it or unsubscribe from it.
- Google — only if you choose to sign in with Google.
These providers process data on our behalf under data processing agreements. Some of them may process data outside the EEA (for example in the United States); in that case transfers are protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We never sell your data and do not use it for advertising.
Cookies and browser storage
We only use what the site needs to work: a sign-in cookie that keeps you logged in, and your browser's local storage to keep a session in progress, your display settings and, if you take a mock without an account, a random guest id on your device. Our visit statistics use no cookies; the course activity log uses only a random id kept in the browser tab's session storage, which is deleted when you close the tab. We do not use advertising or tracking cookies. Paddle may set cookies needed to complete a payment in its checkout window.
How long we keep data
- Account and study data: while your account exists. We delete it within 30 days after you ask us to.
- Error reports and feedback: until they have been dealt with, and at most two years.
- Purchase records: as long as accounting law requires (in Norway, generally five years).
- Course activity: 13 months, then deleted automatically.
- Technical logs: for a short period, normally no more than 30 days.
Your rights
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, or object to processing based on legitimate interests. Email support@cheapmocks.com and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority in your own country.
Children
CheapMocks is meant for adults preparing for a professional exam and is not directed at children.
Changes
If we change this policy, we will update the date at the top. Significant changes will be announced on the site or by email.