The short version
Without an account we store nothing about you, apart from short-lived abuse counters (see below). With an account we store your email address, whether you paid, and your practice progress. We do not sell or share personal data, and we do not run advertising.
Who is responsible
Avlas Digital, Park House, The Square, Claremorris, Co. Mayo, F12 HE97, Ireland, is the data controller. Contact: hello@spsvexam.ie.
Using the site without an account
Your answers, scores and mock exam history are saved in your browser’s local storage on your own device. They never leave your device. Clearing browser data, or the Reset button on the Progress page, deletes them.
When you ask for a login email, report a question or open the payment page, we count those requests per connection to stop abuse. The counter is keyed by a hashed form of your IP address (the address itself is not stored) and of the email you typed, and is deleted once it is more than 7 days old. Legal basis: our legitimate interest in keeping the site working.
With an account
To log in we send a one-time link and a 6-digit code to your email address. We store the address, the time you last logged in, and a session cookie so you stay logged in. The cookie is strictly necessary and needs no consent banner. Once you have an account we also keep a copy of your practice progress on our servers so it follows you between devices. Legal basis: performance of our contract with you.
Full access is for one learner, so while you are logged in we also record, per login, the approximate location (country and city, as Cloudflare reports it), a hashed form of your IP address (the address itself is not stored) and the type of device and browser. We use this only to spot accounts used by several people and keep it for 30 days. Legal basis: our legitimate interest in enforcing the one-learner terms.
We keep account data while your access is active and for 6 years afterwards because Irish tax law requires us to keep sales records. Email hello@spsvexam.ie to delete your account earlier; we delete everything except the invoice record.
Payments
Card payments are handled by Stripe Payments Europe Ltd, Dublin. We never see your card number. Stripe sends us your email, the amount and a payment reference, which we store to grant access and for our accounts. Stripe’s privacy policy is at stripe.com/ie/privacy.
Pass guarantee photos
If you claim the pass guarantee you send us a photo of your NTA result. We use it only to confirm the claim and delete it within 30 days.
Emails
We send login links and codes, the email that confirms your purchase, and replies to your questions. Email goes out through Amazon Web Services (Ireland region), which sees the address and the message.
Two more emails can reach you, each at most once. If you started paying and typed your email on Stripe’s payment page but did not finish, we may send one reminder with a link back to the payment page within a few hours; if you later pay, or already have an account, you will not get it. A few weeks after a purchase we may ask you once, in a short plain email, to leave a review of the site; good or bad, there is nothing in return. Legal basis for both: our legitimate interest in following up a sale you started or made. Reply to any of them and we stop. No newsletters, nothing else.
Maps
Map previews load from openstreetmap.org only after you tap “Show on the map”. At that point your browser requests map tiles from the OpenStreetMap Foundation, which sees your IP address like any website you visit. Their policy is at osmfoundation.org.
Analytics and hosting
The site runs on Cloudflare, which processes IP addresses to serve pages and block abuse. We use Cloudflare Web Analytics, which sets no cookies and does not track you across sites. We also use Google Analytics 4 to see which pages and features get used: it sets cookies only if you press OK in the cookie notice; if you decline, it runs without cookies and without identifying you. You can change your mind by clearing the site data in your browser. We advertise on Google Search and use the same tag to count purchases that follow an ad click; that measurement also respects your cookie choice. If you arrive from one of our ads, we keep the click reference in your browser’s local storage for up to 90 days (and with your account if you log in), only so a later purchase can be matched to that ad; clearing your browser data removes it at any time.
Your rights
You can ask for a copy of your data, a correction or deletion at hello@spsvexam.ie. You can also complain to the Data Protection Commission at dataprotection.ie.