Privacy policy

Summary

We store what we need to measure your level, show your progress and record your payment if you buy the paid plan. We do not show advertising, track you across other websites or sell your data, and we use no cookie that follows you.

Data we collect and the legal basis

Each item states its legal basis. “Contract” means the data is needed to provide the service you signed up for. “Legitimate interest” means we have a specific reason, stated with the item, that does not override your rights.

• Account details. With Google sign-in: your name, email address, the link to your profile picture and your Google account ID. With email sign-in: your email address and a bcrypt hash of your password. Your password itself is never stored or logged. Basis: contract.
• Your answers: the question, your answer, whether it was correct and how long you took. We use them to produce your level, your review schedule and your reports. Basis: contract.
• Preferences: the platforms you choose and your self-rated level. Basis: contract.
• Job descriptions you paste into Interview prep. We keep them so that the resulting profile can be rebuilt and shown to you. When you delete a saved job, its pasted text is deleted with it. Basis: contract.
• Payment records, if you buy the paid plan: the Ziina payment ID, the amount and currency, the status, the number of days purchased, any coupon code used, the date the plan was granted and the date it ends. You enter your card details on Ziina's page, and they never reach this site. Basis: contract, and our legal duty to keep financial records.
• Daily usage counts: questions answered, questions skipped and AI features used. Basis: contract, to apply the plan limits.
• IP address: used only to count requests from one device, to prevent abuse of the free level test and sign-in. It is held in memory for the length of the rate-limit window, which is minutes at most, and is never written to the database. Our hosting provider keeps its own request logs, as described below. Basis: legitimate interest in keeping the service secure and fair.
• Page view counts: the page, country, browser and device type of each visit. We use no cookie and no identifier that could be traced to you. Basis: legitimate interest in knowing which pages are used.
• Offer emails: occasional offers for account holders, such as a discount code, sent to the email address on your account. Basis: legitimate interest in informing existing customers about the service. To stop them at any time, email support@embeddedlevel.com.

Cookies and browser storage

All cookies on this site are strictly necessary. We use no analytics or advertising cookies.

• A signed and encrypted session cookie keeps you signed in for up to 30 days.
• A sign-in security cookie holds a random token that protects the sign-in form against requests from other websites.
• A sign-in cookie records which page to return you to after you sign in.
• If you take the level test without an account, a further cookie holds a random identifier so that you can resume the test. It contains no personal data.
• If you choose the dark theme or to follow your device setting, a cookie stores that choice so that pages display correctly.
• If you skip the setup questions, a cookie records this so that you are not asked again.

When you sign in with Google, short-lived cookies are also set for the redirect to Google and back. They are removed when sign-in is complete. Your browser's own storage keeps your last level test result for 1 day, so that it is not lost if you reload the page. This result never leaves your device.

Service providers and data transfers

Vercel, Neon, Resend and Anthropic store data in the United States. Each of these transfers relies on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the EU standard contractual clauses in the provider's data processing agreement. To request a copy of these safeguards, email support@embeddedlevel.com.

• Vercel hosts the site, processes requests, keeps short-lived request logs and counts page views as described above. Data processing agreement.
• Neon hosts the database that stores the data described above. Data processing agreement.
• Google handles sign-in when you choose Google. Sign-in uses OAuth, so this site never sees your Google password.
• Resend sends our emails: password reset links and offer emails. The sending provider sees your email address and the message. If Resend is unavailable, Gmail is used as a backup sender. Data processing agreement.
• Ziina processes the payment when you buy the paid plan. You enter your card details on Ziina's page, not on this site. We receive only the payment ID, the amount and its currency, and whether the payment succeeded.
• Anthropic receives the text of a job description when you ask for it to be analysed, and again when practice questions are written for that job. The text is not used to train models. If Anthropic's service is unavailable, the site uses local keyword analysis instead and sends nothing. Data processing agreement.

How long we keep your data

• Account data, answers, preferences and saved jobs: for as long as your account exists.
• When you delete your account: your email address, name, picture and password hash are removed. Your saved jobs and their pasted text, your ratings and your review schedule are deleted. Your past answers are kept without any link to you, because they keep the difficulty rating of each question accurate for all users. Basis for keeping them: legitimate interest in the accuracy of the question bank.
• Payment records: kept after account deletion for as long as tax and accounting law requires. Your personal details are removed from the account they refer to. As records of a completed sale, they cannot be deleted on request.
• Password reset links: 24 hours. Sign-in sessions: 30 days.
• Offer emails: we keep a record that an offer was sent to an address, so that the same offer is never sent twice.

Your rights

To make any of the following requests, email support@embeddedlevel.com.

• Access: a copy of the data we hold about you.
• Correction of any inaccurate data.
• Deletion of your account, with the effects described above.
• Restriction: a pause in the processing of your data while a question is resolved.
• Objection to any processing based on legitimate interest, including offer emails.
• Portability: your answers and preferences in a machine-readable file. Your rating is normally included, although it is a figure we calculate rather than data you provided.

We respond to requests within 1 month. You may also complain to the data protection authority where you live.

Changes to this policy

If we change this policy in a way that affects you, we will update the date at the top of this page and publish the new version here.