Privacy Policy
Last updated: 27 September 2026
This policy explains what personal data CheapMocks collects, why, and what rights you have. We collect as little as we need to run the service.
Who is responsible
The data controller is [LEGAL NAME], organisation number [ORG NUMBER], [STREET ADDRESS], [POSTCODE] [CITY], Norway. Contact: support@cheapmocks.com.
What we collect
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address; if you use Google sign-in, also your name and profile picture from Google | To create your account and sign you in | Contract (Art. 6(1)(b)) |
| Purchases: product, date, amount, country and the Paddle transaction reference | To give you access to what you bought and handle refunds | Contract; legal obligation for accounting records (Art. 6(1)(c)) |
| Your study data: answers, scores, time spent per question, flagged questions, bookmarks and notes, and the exam date you enter | To score your mocks and practice, show your reports and progress, and let you review past attempts. Stored with your account | Contract |
| Answer statistics per question, combined across all users | To find and fix questions that are unclear or wrong, and to show how your score compares with other users (only as aggregated numbers) | Legitimate interests (Art. 6(1)(f)) |
| Error reports and feedback you send us, with your account email | To check and fix questions, and to improve the site. We only quote feedback on the site if you ticked the box allowing it | Legitimate interests; consent for quotes (Art. 6(1)(a)) |
| Anonymous visit statistics: pages viewed, referring site, country, browser and device type | To understand which pages are useful. Collected by Vercel Web Analytics without cookies and without identifying you | Legitimate interests |
| Technical data: IP address, browser type, time of request | To keep the site secure and working, and to prevent abuse | Legitimate interests (Art. 6(1)(f)) |
| Emails you send us | To answer your questions and requests | Legitimate interests |
We never see or store your card details. Payments are handled entirely by Paddle.
Who we share data with
- Paddle (Paddle.com Market Ltd, UK) — our reseller and Merchant of Record. Paddle processes your payment and billing details as an independent controller under its own privacy policy.
- Supabase — stores accounts and purchase records (servers in the EU).
- Vercel — hosts the website and provides cookie-free visit statistics.
- Resend — sends sign-in emails.
- Google — only if you choose to sign in with Google.
These providers process data on our behalf under data processing agreements. Some of them may process data outside the EEA (for example in the United States); in that case transfers are protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We never sell your data and do not use it for advertising.
Cookies and browser storage
We only use what the site needs to work: a sign-in cookie that keeps you logged in, and your browser's local storage to keep a session in progress and your display settings on your device. Our visit statistics use no cookies. We do not use advertising or tracking cookies. Paddle may set cookies needed to complete a payment in its checkout window.
How long we keep data
- Account and study data: while your account exists. We delete it within 30 days after you ask us to.
- Error reports and feedback: until they have been dealt with, and at most two years.
- Purchase records: as long as accounting law requires (in Norway, generally five years).
- Technical logs: for a short period, normally no more than 30 days.
Your rights
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, or object to processing based on legitimate interests. Email support@cheapmocks.com and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority in your own country.
Children
CheapMocks is meant for adults preparing for a professional exam and is not directed at children.
Changes
If we change this policy, we will update the date at the top. Significant changes will be announced on the site or by email.