This exam site
Privacy
This page says what a paid practice site stores today. Unpaid content pages request display ads from Google. This site is not the official test.
Updated 2026-09-14
What we store
If you register: the email you use on this site, a hashed password, and an optional display name. If you continue with Google: a Google account id plus the email and name Google sends, so we can sign you in on this hostname only.
If you subscribe: Stripe customer and subscription ids, payment status, and amounts. Card numbers stay with Stripe. We may send a receipt naming this exam to that account email.
If you practise or sit a mock while signed in, answers can be stored against this hostname’s account. Password-reset tokens are short-lived and single-use.
If you ask for an AI tutor comment after a submitted mock, we send that item’s stem, options, your selection or written response, and our written rationale to DeepSeek (the model provider) so it can generate the comment. We do not send your email, password, or card number to DeepSeek. We may store the comment against this hostname’s account.
On content pages, if you are not subscribed to Pro on this hostname, we request a display ad from Google. We do not send your email, password, or card number to Google for those ads. This first period is contextual (the page you are on), not a profile of you. Pro on this exam site does not see ads.
If you write to [email protected] we read the mail to reply. We do not sell enquiry mail or use it to promote other exam sites.
Cookies
A host-only session cookie named sid keeps you signed in on this hostname. It is HttpOnly, SameSite=Lax, and is not shared with other RomiTree subdomains. Signing out clears it. When we request a display ad, Google may set its own advertising cookies. This period uses non-personalized ads. Visitors in the EEA, UK, or Switzerland may see Google’s certified consent message. We do not put a separate consent popup in the exam skin. Visitors in the UK or EEA: Google may set advertising cookies when filling a display ad. Google’s certified consent message may appear. Personalized ads are not used in this period.
What we do not do yet
We use Google Analytics on this exam site to count visits by hostname. Google may set analytics cookies. We send the exam site identifier, not your email, password, or card number. Visitors in the EEA, UK, or Switzerland may see Google’s certified consent message. We do not put a separate consent popup in the exam skin. Sign in and open Account to delete this hostname’s login, practice history, and Pro seat. That cancel is not a refund. You can also write to [email protected] from the address you registered.
Contact
Write to [email protected]. Put “CITB HS&E practice” in the subject so we know which product. Public name RomiTree, legal name Elavora Limited.