Privacy
What is stored, and why.
What this service collects, who else sees it, how long it is kept, and what you can ask us to do with it.
Who is responsible for this data
The controller is Jordi Bravo, 8, Rue de Stavelot, L-2553 Luxembourg, who operates NT2exam at nt2exam.com. Anything on this page can be asked about at support@nt2exam.com, and we answer within two working days.
What is collected, and why
An account is an email address and a password we store only as a one way hash. Using the product stores what you did: your answers, your level, your streak, your exam date if you give us one, and the writing and the voice recordings you send to be marked, together with the marking that came back. Paying stores a payment record: the amount, the date, a reference and the address you bought with. Writing to us stores your message. Visiting stores a row about the visit and about the advertisement or link you arrived from.
The grounds we rely on
Your account, progress, marking and payment support your purchase. After a free test, an account or a started purchase we send you a few emails about the course, and every email has a one-click unsubscribe. Advertising measurement follows your separate cookie choice.
Who else sees it
A payment provider takes the card payment and holds the payment record. A mail service delivers the messages we send you. A language model service marks your writing and turns your recordings into text, and it is sent that text and that audio for those two jobs and for nothing else. A hosting and database provider runs the site and stores the rows. Meta is sent advertising data, and only if you accepted advertising cookies. Nothing here is sold to anybody.
Where it goes
Some of those providers process data outside the European Union, including in the United States. A transfer like that needs a legal safeguard behind it, and the one relied on here is the standard contractual clauses the European Commission publishes, or an adequacy decision where one covers the provider.
The marking is done by a machine, and a person will look
Your writing and your recordings are marked by a language model against published criteria. It is practice, it decides nothing about you in law, and it is not an official mark. If you think a marking is wrong, write to us and a person will read it.
Advertising, and what Meta is told
With your consent, Meta receives page views, checkout starts and confirmed purchases through its pixel and our server. Matching data includes advertising cookies, IP address, browser information and a hash of your email when available. Reject disables measurement and advertising. Your choice lasts 12 months; change or withdraw it using Cookie choices in the footer.
The cookies, by name
nt2_consent stores your choice for 365 days. nt2_session and nt2_guest support your account and progress. After Accept, nt2_journey measures visits, nt2_ref and nt2_ad_landing remember referrals and ads, and Meta may set _fbp and _fbc. Reject stops this optional tracking.
First visit attribution
After you choose Accept all, nt2_first_touch stores the path and referrer host of your first measured visit, its time, campaign tags and advertising click IDs for 180 days. Later consented visits update the latest visit, while the first stays fixed. A copy is kept with an email capture or checkout order and sent with the checkout to Stripe. With Only necessary, no first visit attribution cookie or record is made. Withdrawing consent clears the cookie and attribution on active leads and unpaid orders. Paid orders retain their payment history for the legal retention period.
How long it is kept
Voice recordings are deleted 180 days after you send them. Your account, your progress and your marking stay while the account exists and go when you ask us to delete it. Payment records are kept for as long as tax law requires them to be. A cookie choice lasts 365 days and then you are asked again.
What you can ask for
A copy of what we hold, a correction, deletion, a restriction, an objection, and your data in a portable file. Withdrawing a consent you gave is one message and it costs you nothing you have already paid for. Write to support@nt2exam.com. We answer within two working days, and within one month at the very latest. If that does not satisfy you, you can complain to the data protection authority of the country you live in or work in, which for a reader in the Netherlands is the Autoriteit Persoonsgegevens. The authority that supervises us is the Commission nationale pour la protection des données (CNPD) in Luxembourg.
Error reports carry no identifier
When something breaks, what is recorded is the failure and a coarse browser family. No address, no address book, no fingerprint, no identifier of any kind.