Privacy Policy
Last updated: 28 October 2026
This policy explains what personal data IELTS X (“we”, “the site”) collects when you use the website, why we collect it and what you can do about it. By creating an account or using the site you agree to this policy.
1. What we collect
- Account data: your name and email address. Your password is never stored; we keep only a salted scrypt hash of it. If you sign in with Google, we receive your name and email from Google.
- Learning data: the tests you finish (test name, section, score, band and time spent), so your results and progress follow your account on every device.
- Orders: the plan you chose, the number of months, the amount, the order code and its status. We do not receive or store your card details.
- Technical data: the date of your last sign-in and the number of sign-ins. IP addresses are used briefly to limit repeated sign-in attempts and are not stored in your account.
Some things stay only on your device and are never sent to us: speaking recordings you make for practice, writing drafts, the light / dark theme and similar settings (kept in your browser’s local storage).
2. Why we use it
- to create your account, sign you in and keep you signed in;
- to save your results and show your progress;
- to turn on, extend and check your paid plan;
- to send service emails (email confirmation, password reset);
- to protect the site and its users from abuse, fraud and unauthorised access.
We do not sell your data and we do not use it for advertising.
3. Cookies
We use one essential cookie, ieltsx_session, to keep you signed in. It is HttpOnly (scripts cannot read it), sent only over HTTPS and expires after 7 days. The site does not use advertising or tracking cookies.
4. Services that process data for us
- Vercel — hosting of the website.
- Supabase — the database and file storage where accounts, results and orders are kept.
- Google — only if you choose “Continue with Google”.
- Resend — delivery of service emails.
- Telegram — only the messages you send us yourself, for example to confirm a payment.
These providers may store data on servers outside your country. They process it only to provide their service to us.
5. How long we keep it
We keep your account data and results while your account exists. When an account is deleted, its results are deleted with it. Order records may be kept longer where we need them for accounting.
6. Security
The site works only over HTTPS. Passwords are hashed, sessions can be signed out on every device, sign-in attempts are rate limited, and only administrators can see account data, with every administrator action recorded in a log.
7. Your rights
You can choose a new password at any time with “Forgot password” on the sign-in page. You can ask us for a copy of your data, to correct it or to delete your account and its data by writing to us (see below). We answer within 30 days.
8. Children
IELTS X is meant for people preparing for the IELTS exam. If you are under 16, please use the site with the permission of a parent or guardian.
9. Changes
We may update this policy. The date at the top shows the latest version; important changes will be announced on the site.
10. Contact
Questions or requests about your data: Telegram @sh7595.