Privacy notice
Version 1.2 · 15 August 2026 · sharing an account, keeping things longer, and how deletion now works
The short version. We hold your email address, a nickname you choose for your child, their school grade, and their answers to the test. We use no analytics that can identify anyone, and the only cookie we set is the one that keeps you signed in, if you sign in. We never ask for your child's real name. We do not sell anything to anybody, and there is no advertising. You can see everything we hold, take it with you, or have it deleted, from a link in your report.
Who we are
Point of Progress is operated by , registered in Hungary, which is the data controller for everything described here.
You can reach us through the contact form. We answer data protection requests within one month, as the law requires, and usually much sooner.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Your email address | To send the report link, the two deadline reminders, and a sign-in link when you ask for one | Performance of our contract with you |
| A nickname for your child | So the report and workbook are addressed to them | Performance of our contract with you |
| Their school grade | It sets the starting difficulty of the test | Performance of our contract with you |
| Their answers, and how long each took | To choose the next question and to produce the score and the report | Performance of our contract with you |
| Optional questionnaire answers | To caveat the score honestly, and to improve the test | Consent, given by answering. Every question is skippable |
| Marketing emails | Only if you tick the box, which starts unticked | Consent, withdrawable in one click |
What we deliberately do not collect
- Your child's real name. We ask for a nickname and say so. A nickname is enough to make a report feel personal and is far less to protect.
- Any account for your child. There is no login, no profile, and no password.
- Card details. Payment happens on our provider's own page. No card number, expiry or security code ever reaches this site.
- Your location. The currency you see is guessed from your browser's timezone setting, not from your IP address, and nothing about it is stored.
Why we are allowed to hold it
The law wants us to tell you which legal basis we rely on for each thing, so here it is in one table. It matters to you in a practical way: where the basis is consent you can withdraw it, and where it is a contract you cannot - but then we only hold what the contract needs.
| What | Why we hold it | Legal basis |
|---|---|---|
| Your email address | To send the report, the access link, the deadline warnings, and a sign-in link when you ask for one | Performing our contract with you |
| The nickname and grade | The report is addressed to a child and the test starts at a grade | Performing our contract with you |
| The answers, timings and score | There is no report without them | Performing our contract with you |
| The purchase record and receipts | Tax and accounting law requires it | A legal obligation |
| The two consents and the terms version | To show we asked properly before you gave up the withdrawal right | A legal obligation |
| The optional questionnaire | To improve the test. Every question is skippable and the report is released either way | Your consent, withdrawable at any time |
| Marketing email | Only if you ticked the box | Your consent, withdrawable at any time |
| Anonymous item statistics | To find questions that are not working | Our legitimate interest in a test that measures accurately. Nothing in them identifies anybody |
| The salted hash behind the contact form | To stop one sender flooding it | Our legitimate interest in a form that still works |
The score is worked out by a computer
Said plainly because it is true: the difficulty of each question, the score, the band and the workbook chapters are all chosen by software, with no person looking at them. That is what makes the test adaptive.
It is not a decision with legal or comparable significance - nothing follows from it automatically, no school sees it, nothing is refused or granted on the strength of it, and it is advice to a parent rather than a gate. But you are entitled to ask a person to look, and if you think a score is wrong, say so and we will check the working and tell you what we find. The score explainer sets out how the number is reached.
Cookies, and why there is no banner
There is exactly one cookie, it is only set if you sign in, and it does nothing except keep you signed in. Browse the site without signing in and nothing at all is stored on your device - no cookie, no local storage, no fingerprinting.
The cookie is called pop_session. It holds one long random code and nothing else: not your name, not your email address, not anything about your child. The code means nothing to anyone who reads it, because we do not store the code either - only a one-way scramble of it, so even we cannot turn what is on your device back into what is in our database. It lasts 30 days, or until you sign out, whichever comes first. Signing out ends it at our end as well, so a copy of the cookie is no use to anybody afterwards. It is marked so that no script can read it, so that it is only ever sent over an encrypted connection, and so that other websites cannot cause it to be sent.
That is why there is still no banner. A banner exists to ask permission for storage that serves us, and this cookie serves only you: without it, signing in would not stay signed in. The law does not require consent for a cookie that does nothing but deliver the thing you just asked for, and we use it for nothing else. If that ever changes, this page changes first.
We do count page views, and we are explicit about it: each page tells our own server which page was viewed and which site linked to it, and that adds one to a counter. There is no identifier of any kind, not even a temporary one, so repeat visits cannot be told apart from new ones. This is true whether or not you are signed in - the counter is never joined up to your account. Fonts are served from our own domain rather than from Google, so your browser contacts nobody but us.
Signing in with Google tells Google that you signed in to Point of Progress, because you are on their page while you do it. Google tells us three things back: your email address, your name, and whether the address is confirmed. We ask for nothing else, and we cannot see your Google password or anything else in your Google account.
Who else sees anything
Anybody you invite, and nobody else. You can invite one other person - the other parent, usually - to see your account. They sign in with their own address, and they see every child, every report and every deadline on it, and can buy another test. They cannot rename a child, change any address, invite anyone else or delete anything: those stay with you, and you can withdraw their access at any moment, which takes effect immediately. We never add anybody to an account ourselves, and an invitation does nothing until the person opens the link we email them.
Beyond that, four companies. What each one does, what it gets and where it sits is below. Their names are one click away rather than written into the page, for the same reason our address is: a list sitting in the source is collected by every crawler that passes. Ask us and we will name them in writing, and two of the four are visible in our own response headers anyway.
| Who | What they do | What they get | Where |
|---|---|---|---|
| Our hosting provider | Runs the servers and the database | Everything in the table above | Frankfurt, Germany |
| Our payment processor | Takes the payment, as merchant of record | Your email and the amount. Not your child's nickname or grade - payment does not require knowing who the test is for | Ireland, with support from the United States |
| Our email provider | Sends our email | Your email address and the message | European Union |
| Our network provider | Sits in front of the site, filtering attacks | Your IP address and the page you asked for, in transit. It is not stored by us | Nearest city to you |
Nobody else. We do not sell or share personal data, and there are no advertising or analytics companies in this list because we use none.
Leaving Europe. Our hosting provider keeps everything in Frankfurt and our email provider stays in the EU. Our payment processor is Irish and may involve its United States group for support and fraud checks, and our network provider terminates your connection at whichever city is nearest you. Where data does reach the United States it travels under the European Commission's adequacy decision for the EU-US Data Privacy Framework, with the Standard Contractual Clauses underneath as a fallback. Your child's answers and the report never leave Frankfurt.
How long we keep it
Twenty-four months from your last activity, then it is erased automatically. Activity means the last thing that happened on your purchase, not the purchase date - so a child who takes the test a year later has not started the clock a year early.
Two things survive erasure, and neither identifies anybody: anonymous item statistics (how often a given question was answered correctly, with no link to any person) and the records of the purchase that tax law requires us to keep.
The report and the workbook themselves. We keep the finished PDFs for 90 days, so that if you lose your download, or ask us a question about your report weeks later, we can send you the exact document you were given. After 90 days we delete the stored files and rebuild them from your test record if you ask - which produces the same document, because it is built from the same answers. Both are deleted immediately if you ask us to delete your data, and 90 days is a limit on how long we hold the files, not an extension of the twenty-four months above.
If you ask us to keep it longer. There is a switch in your account settings that stops both clocks: the ninety days on the documents and the twenty-four months on everything else. It exists because a parent testing the same child a year apart wants the earlier result to still be there to compare against, and the ordinary schedule would have deleted it. Nothing is kept indefinitely unless you ask for it, we ask for nothing extra in exchange, and you can switch it off in the same place - at which point the ordinary clocks start again from that moment, and anything already past its date is deleted at the next sweep. This is consent under Article 6(1)(a), separate from everything above, and withdrawing it is one click.
If you write to us through the contact form. We keep that message, and the name and address you gave with it, for twelve months after we have dealt with it, then delete it automatically. Twelve rather than three months because a complaint can come back long after the first exchange - our terms give us thirty days to answer one, and you can take it to the conciliation board months later - and we would rather be able to show you exactly what we said. A message nobody has answered yet is never deleted. This is separate from the twenty-four months above, which measures activity on a purchase: if you have written to us but never bought anything, this paragraph is the only one that applies to you.
Your rights
- See everything we hold - a complete export, readable by a person and by a machine.
- Take it elsewhere - the same export, in a structured format.
- Have it deleted - one purchase, or the whole account. Either way you ask and we do it by hand, usually within two working days. It includes the nickname inside any report or workbook already generated. See below for why a person does it.
- Correct anything wrong, and object to processing based on our legitimate interests.
- Withdraw consent at any time, for the questionnaire or for marketing. It does not affect anything done before you withdrew.
Seeing, correcting and taking your data is one click from the link at the end of your report, and from your account settings. No form and no proof of identity beyond the link itself.
Deleting is different, and deliberately so. Whether you ask for one purchase or for your whole account, you tell us and a person carries it out by hand. We aim to be finished within two working days and are required by law to be finished within 30, and we write to you when it is done. Nothing is deleted until then, so you can change your mind by replying to us at any point before we act.
It works that way because erasure is the only thing here that cannot be undone. A button that did it instantly would be reachable by anyone who found a signed-in browser or a forwarded email, and would destroy years of a child's work with one press. We would rather a person read the request. You still have to prove the request is yours before it reaches us: for a single purchase we email a one-time link to the address that bought it, and for a whole account you have to be signed in as its owner.
If we get it wrong, you can complain to your national data protection authority. In Hungary that is the NAIH.
Children
The customer is you, not your child. A child cannot buy anything here, cannot create an account, and is never asked for their name, their address or their age in years. We hold a nickname you chose and a grade you gave us.
We do not profile children, do not use their data to decide what to sell them, and use no technique designed to keep a child on the screen longer. The test ends when it ends.
How we keep it safe
Everything travels over an encrypted connection - the padlock in your browser - and the database sits in Frankfurt behind access controls, not on a public network.
We never see a card number. Payment happens entirely on our provider's own page. No card number, expiry date or security code reaches this site, is stored by us, or passes through our servers, which keeps us out of the scope of most card-security requirements rather than merely compliant with them.
Requests that could be abused are rate limited, the payment provider's messages to us are cryptographically signed and verified before they are acted on, and a child's answers are never sent to the browser in a form that reveals the correct answer.
No system is perfect. If you think you have found a weakness, please tell us through the contact form and we will take it seriously.
Changes
If this notice changes in a way that affects you, we will say so plainly rather than quietly updating a date. The version and date are at the top of this page.