Privacy notice

What we collect

Teachers: your Google name, Gmail address and the profile details you add, the papers you make, and any message you send to support, with its screenshot.

Teachers who ask to be verified: the name on your NIC, your NIC number (and the date of birth it holds), a mobile number, your address, photos of both sides of your NIC, and the note you add. Verified teachers show a Verified teacher badge next to their name on their papers, the Public Question Bank and Home.

Candidates: only the details the teacher asks for on that paper (name, email, phone, NIC or candidate number), plus your answers and the time spent on each question, and any rating, feedback or problem report you send.

Comments on job vacancies: the name you give (or Anonymous) and your comment, which anyone can read, and the phone number and email you choose to add, which only admins see.

Your device: a cookie that lets you carry on a paper you started on this device, for 24 hours after you last used it.

Comments, Helpful and reports: one-way codes made from that cookie and from your internet address, so each device and each address counts once (one Helpful and one report per comment, one comment a minute). The codes can't be turned back into your address, and they aren't the ones used for papers, so they don't link your comments to your answers.

Counting visits: when you open a paper's link we count it once a day using the same one-way codes, and with your attempt we keep one word for where you opened the link from (Home, a job vacancy, a share button or elsewhere), never the address. The words you type in Home's search are counted too, never who searched. When you press a share button we count which one, never what you shared or with whom; the buttons are plain links, so the networks learn nothing until you choose to send. Admins see only totals.

Why we collect it

To run, mark and return each paper; to stop repeat attempts when a paper limits them; and to email your result key, if you give an email.

If you leave a phone number or email with a comment, it's so an admin can reply to you privately.

A teacher's verification details are used only to check who they are before their papers go live without review, and to make sure one NIC verifies one account.

Who can see it

Only the teacher who set the paper, and site admins when a paper is reported. Other candidates never see your details. We never sell data or use it for ads.

Comments are public. The phone number and email you add to a comment are seen only by admins, and every time an admin shows them is recorded.

A teacher's verification details are seen only by admins: the NIC and mobile numbers and the street address stay hidden until an admin chooses to show them, and every look, and every time an admin opens the NIC photos, is recorded. Admins read a paper only while it waits for their review, or when it's reported.

How long we keep it

Candidate details are deleted 12 months after a paper closes. Scores are kept without names, so a teacher's results still add up.

If you delete your details, we keep a one-way code made from your email and NIC number until your details would have been deleted anyway, so the attempts limit still applies.

A comment stays until you or an admin deletes it, or its vacancy is deleted. The phone number and email added to it are deleted 12 months after it was posted, its device and address codes after 30 days, and each Helpful and report record 12 months after it was made (the counts stay).

A record of each email we send is kept for 12 months; the email itself is not kept.

The photos of a teacher's NIC are deleted 30 days after an admin decides, whatever the decision; if the teacher isn't verified, the other details go then too. A verified teacher's details are kept, encrypted, while the account exists. Withdrawing a request deletes all of it at once, and so does deleting the account.

The codes used to count a link's openings are deleted after two days; the daily counts stay, with nothing that identifies anyone.

For teachers, we keep a one-way code for each browser you sign in on, so we can email you about a sign-in from a new device. It's deleted after 400 days without use, or when you delete your account.

A full copy of the database is made each night and kept for 30 days in private storage that only the site can read, so the site can be restored after a fault. It holds everything the site stores, including names, answers and comments; emails, phone and NIC numbers stay encrypted in it.

Your choices

Delete your details any time from your result, using your result key. Teachers can delete their account from their profile, which deletes their drafts and Question Bank and closes their published papers.

Delete your own comment, with its phone number and email, from the same device within a day of last using the site: press Delete under it. After that, report it and choose Shares personal details, and an admin will hide it.

How we protect it

Everything is encrypted in transit. Candidates' emails, phone numbers and NIC numbers, the phone numbers and emails added to comments, and the name, NIC number, mobile number and address teachers give to be verified, are encrypted where we store them; NIC photos are kept in private storage only the site can read. Teachers' Gmail addresses are stored as they are, so they can sign in.

Phone and NIC numbers are hidden in teacher and admin screens until someone chooses to show one, and every time is recorded.

When admins download the site's data, they get papers' settings, statuses and scores, and the site's records, without names, emails, phone or NIC numbers, answers, answer keys, comments, notes or messages. A teacher who exports their results with candidate details is recorded each time.

Questions

Teachers can write to us from Help, Contact support. Candidates can report a problem from the paper's page.