Privacy policy

Last updated: 2026-11-12

Short version: you do not need an account, we set no cookies, we run no analytics or advertising, and your answers stay in your browser. The one exception is optional: if you press "Evaluate with AI" for a Writing or Speaking answer, that answer is sent for evaluation and is not stored by us. This page explains this in detail and matches how the site actually works on the date above.

1. Who is responsible

Data controller: ExamFreely. Contact: hello@examfreely.com. EU/UK representative or data protection officer, if required: not appointed, as we keep no accounts or user profiles; please use the e-mail address above.

2. Data minimisation

We collect only what is needed to run a practice test in your browser. We do not ask for your name, email, phone number, date of birth, location or any identity document, and we do not require registration.

3. What is stored on your device

The site uses your browser's localStorage (not cookies). Keys and purposes:

dilsinav:anon: A random device ID (UUID) created when you start a session. It is never sent to our server and is not linked to you. Reserved for future features.
dilsinav:oturum:<exam>: Your current test session: chosen mode, timers, position, your answers, flags, and any text you typed in Writing or Speaking note fields. Kept until you finish and clear it, or clear browser data.
dilsinav:son:<exam>: Your last mode choices for that exam (mode, version, level, skill, timer on/off), to pre-fill the chooser.
dilsinav:gorulen:<exam>: List of question-set IDs you have answered, so later tests avoid repeating them.
dilsinav:tema: Your light/dark theme choice, only if you pressed the theme button.

If localStorage is blocked, the site works from memory only and nothing is stored. All of this data stays on your device; we cannot read it. You can delete it at any time (see the Cookies and local storage page). Two more entries exist only if you use AI evaluation: dilsinav:ai-riza (the time you accepted the AI evaluation notice) and dilsinav:ai:<exam>:<set>:<item> (the AI result for that answer, including short quotations from it and, for a Speaking recording, its transcript, with a short fingerprint of the answer so the same answer is not sent twice). Speaking tasks can record your voice so you can listen back and compare with a model answer. The browser asks for microphone permission only on Speaking tasks, after you press the start button. The recording is stored only on your device (in your browser's IndexedDB) and is not sent anywhere unless you press "Evaluate with AI" for that recording (section 4). In Real exam mode you get one attempt; in practice modes you can listen and record again. You can delete all recordings with the "Delete my recordings" button on the results screen, or by clearing your browser's site data. If you refuse the microphone, the task still works with a text note field.

4. What our server receives

The site is a static website with one small server function used only for AI evaluation (below). Your language is chosen from your browser's language setting by script running in your browser; this value is not sent to us. When you use the site, your browser downloads pages, scripts, styles, fonts (self-hosted, no Google Fonts or other font CDN) and question files (for example /icerik/<exam>/<set>.json, and the answer file for a set only on the results screen). Question files and answer keys are public static files.

Like any web host, our hosting provider (Cloudflare, with servers worldwide) processes technical request data: IP address, requested URL, time, browser/user-agent and referrer, for delivering the site, security and abuse prevention. We do not combine this with any account or profile because none exists. We have no analytics tool, advertising or tracking pixel on the site. The only third-party script is Cloudflare Turnstile, and it is loaded only when you request an AI evaluation.

AI evaluation (optional). Writing and Speaking answers are evaluated only when you press "Evaluate with AI" on the results screen and accept the notice shown the first time. Then: (a) your browser runs Cloudflare Turnstile, a bot check that processes technical data about your browser and connection under Cloudflare's Turnstile privacy terms (https://www.cloudflare.com/turnstile-privacy-policy/); (b) the text you wrote, or for Speaking the audio recording, is sent to our server function (a Cloudflare Worker) together with the exam, the question-set ID, the item number and your interface language; (c) a recording is forwarded to OpenAI to be turned into text, and the text or transcript is forwarded with the task to Anthropic (Claude) to be evaluated; (d) the result is returned to your browser and kept there. Our server keeps no copy of your text, recording, transcript or result and does not write them to its logs. We send no name, account or device ID with the content; please do not put personal details in your answers. Anthropic and OpenAI process the content under their own terms and may retain it for a limited time, for example for safety and abuse monitoring, as described in their policies (Anthropic: https://privacy.anthropic.com ; OpenAI: https://platform.openai.com/docs/guides/your-data). To limit abuse we keep, for one day, a counter of evaluation requests per one-way salted hash of your IP address (the IP address itself is not stored and the hash changes every day), and a daily total of estimated cost that contains no personal data.

5. What we do not collect

Your answers and scores for Reading and Listening questions: scoring happens in your browser and nothing is uploaded. Text you type is uploaded only if you ask for an AI evaluation of it (section 4).
Audio or video: the site asks for your microphone only in Speaking tasks, and only after you press the start button. Recordings stay on your device unless you ask for an AI evaluation of a recording (section 4). The site does not use your camera.
Accounts, passwords, payment data or advertising identifiers.
Automatic AI evaluation: nothing you write or record is evaluated by AI unless you ask. We keep no copy of evaluated answers, transcripts or AI results on our servers.

6. Legal bases and applicable laws

Server logs (section 4) are processed for our legitimate interest in running and securing the service (GDPR Art. 6(1)(f)); in Turkey, under KVKK Art. 5(2)(f) (legitimate interests). Browser storage that you create by using the test is kept on your device at your own initiative and is used only to provide the function you asked for. AI evaluation is carried out only at your request and on the basis of the consent you give in its notice (GDPR Art. 6(1)(a); KVKK Art. 5(1)); you can withdraw it for the future by no longer using the feature and clearing your site data. The bot check and the one-day request counter are processed for our legitimate interest in preventing abuse.

This policy is written to meet the information duties of: the EU/UK GDPR; Turkey's Personal Data Protection Law No. 6698 (KVKK), including the disclosure duty in Art. 10; Japan's Act on the Protection of Personal Information (APPI); and Korea's Personal Information Protection Act (PIPA).

International transfers: the hosting provider operates a global network, so request data may be processed outside your country. We rely on the provider's contractual safeguards for such transfers. If you use AI evaluation, the answer you submit is also sent to Anthropic and OpenAI, which are based in the United States; by accepting the notice you agree to this transfer.

7. Retention

Data on your device remains until you delete it. Server logs are kept by the hosting provider for the short period set by its own settings and policies, then deleted or aggregated. We keep no separate database of users. Content sent for AI evaluation is not kept by us; Anthropic and OpenAI keep it only for as long as their own policies provide (links in section 4). The request counter linked to the hash of your IP address is kept for one day.

8. Your rights

Depending on where you live, you may have the right to know whether data about you is processed, to access, correct, delete or restrict it, to object, to data portability, and to complain to a regulator (KVKK Art. 11; GDPR Arts. 15-22; APPI disclosure, correction and cessation rights; PIPA access, correction, deletion and suspension rights). Because we hold no information that identifies you, we may be unable to link a request to you; data on your device can be fully managed by you.

To make a request, write to hello@examfreely.com. You may also contact your regulator: in Turkey the Personal Data Protection Authority (KVKK), in the EU/EEA your national data protection authority, in Japan the Personal Information Protection Commission, in Korea the Personal Information Protection Commission.

9. Children

ExamFreely is intended for learners preparing for language exams, including school-age students (for example Cambridge exam candidates). We do not knowingly collect personal data from anyone, including children, and the site works without any personal information. If you are below the age at which you can consent to data processing yourself in your country, please use the site with a parent or teacher. If a future feature (such as accounts) requires personal data, we will ask for parental consent where the law requires it.

10. Future features

Accounts and advertising are not active today. AI evaluation of Writing and Speaking is active and is described in section 4. Before accounts or advertising go live, this policy (and the Cookies page) will be updated, and where required we will ask for your consent first. Examination screens will never show advertising.

11. Changes

We will change this page when the site's behaviour changes and update the date above. Earlier practice sessions on your device are not affected.