Website Privacy Policy

    Last updated: July 2026

    1. Introduction

    Welcome to IB Interview Questions ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect your information when you visit our website, create an account, or purchase our Premium offering. It applies to this website only and not to our mobile application, which is covered by a separate app privacy policy.

    The data controller responsible for your personal data is Alexis Lentati, an independent sole proprietor based in France. You can reach us using the contact details at the end of this policy.

    This website displays third-party advertising (including Google AdSense) and uses analytics. Because we serve visitors in the European Union, we handle personal data in line with the EU General Data Protection Regulation (GDPR).

    2. Information We Collect

    Automatically Collected Information

    When you visit the site, cookies and similar technologies (used by us and by the third-party services below) may collect:

    • Usage and analytics data: pages visited, time on site, referring page, product interactions (such as sign-ups, practice sessions, and purchases, recorded as anonymous events), and approximate (city-level) location, collected through Google Analytics 4
    • Device and browser information: browser type, operating system, screen resolution, and language
    • Advertising data: cookie identifiers and similar data used by Google and other advertising partners to select and measure the ads you see, where you have consented

    Account Information

    Reading the site's content and downloading our free PDF guide require no account and no personal information. If you choose to create an account, we collect and store:

    • Sign-in data: your email address and, if you use a password, a securely hashed version of it (we never store or see the password itself). If you sign in with Google, we receive your email address from Google; we do not receive your Google password
    • Practice and progress data: your activity in the practice product, such as which questions you have answered and how, quiz scores, reading progress, streaks, bookmarks, and any answers or notes you choose to write and save

    Payment Information

    Premium payments are processed by Stripe. Your card or payment details are entered on Stripe's secure pages and go directly to Stripe: they never touch our systems, and we never see or store your full card number. What we store is your subscription status: the plan you are on, its billing period, and a short label of the payment method (for example "Visa ending 4242") so your account page can display it.

    3. How We Use Your Information

    We use the data collected to:

    • Provide the service: keep you signed in, save your practice progress, and unlock what you have paid for
    • Process payments and manage subscriptions through Stripe
    • Send transactional emails you request, such as email confirmation and password reset messages
    • Improve website performance and user experience
    • Understand which content and features are most valuable to users
    • Fix technical issues and optimize site speed
    • Display advertising that helps fund the free content, and measure how those ads perform

    We do not send marketing emails, and we do not sell your personal information.

    4. Cookies, Local Storage, and Your Consent

    We use the following categories of cookies and similar technologies:

    • Essential cookies and local storage: required for the website to function, including keeping you signed in to your account and remembering an in-progress checkout. These do not track you and are not used for advertising
    • Analytics cookies: set by Google Analytics 4 to help us understand how the site is used
    • Advertising cookies: set by Google and other advertising partners to serve and measure personalized and non-personalized ads

    Before any analytics or advertising cookies are placed, we ask for your consent through our cookie consent banner, a Google-certified Consent Management Platform. Essential cookies and storage do not require consent because the site cannot work without them. You can change or withdraw your consent at any time by reopening the cookie settings from the banner, and you can also block or delete cookies in your browser settings.

    5. Advertising

    This website uses Google AdSense and may work with other advertising partners to display ads. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website and other websites. Google's use of advertising cookies enables Google and its partners to serve ads to you based on your visits to this site and other sites on the Internet.

    You can opt out of personalized advertising in several ways:

    For more detail on how Google handles data when you use sites that use its services, see How Google uses information from sites or apps that use our services.

    6. Analytics

    We use Google Analytics 4 to understand how visitors use the site, including anonymous product events such as sign-ups, practice activity, and purchases. Google Analytics 4 collects event-based usage data and device information, and it derives an approximate (city-level) location from your IP address. Google Analytics 4 does not log or store IP addresses. Analytics data is not linked to your account identity. You can prevent your data from being used by Google Analytics by declining analytics cookies in our consent banner or by installing the Google Analytics Opt-out Browser Add-on.

    7. Third-Party Services

    • Netlify: website hosting and content delivery (serves the pages you view)
    • Supabase: account authentication and database hosting (stores your account and practice data described above)
    • Stripe: payment processing for Premium (handles your payment details; see Stripe's privacy policy)
    • Resend: delivery of transactional emails such as confirmation and password reset messages
    • Google: optional sign-in with Google, Google Analytics 4, and Google AdSense
    • App Store and Google Play: outbound links to download our app (no data is shared with them from this site)

    8. Legal Basis for Processing

    Under the GDPR, we rely on the following legal bases:

    • Performance of a contract: for account data, practice and progress data, subscription data, and transactional emails, which are all needed to provide the service you signed up for
    • Consent: for analytics cookies and advertising cookies, which are only set after you agree through our consent banner. You may withdraw consent at any time
    • Legitimate interests: for essential cookies and storage needed to deliver and secure the website
    • Legal obligation: for keeping transaction records as required by French accounting and tax law

    9. Data Retention

    • Account and practice data: kept for as long as your account exists, and deleted when your account is deleted. You can request deletion at any time using the contact details below
    • Transaction records: kept for the period required by French accounting and tax law, even after account deletion
    • Analytics data: event data in Google Analytics 4 is retained for up to 14 months and then automatically deleted by Google. The main Google Analytics cookie (_ga) can remain on your device for up to 2 years unless you delete it sooner
    • Advertising cookies: retained for the periods defined by the advertising providers; you can remove them at any time through your browser or the opt-out tools above

    10. International Data Transfers

    Some of our service providers, including Google, Netlify, Supabase, Stripe, and Resend, are based in the United States or host data there, so your data may be transferred outside the European Union. Where this happens, those transfers are covered by safeguards approved under the GDPR, such as the European Commission's Standard Contractual Clauses and, where applicable, certification under the EU-U.S. Data Privacy Framework.

    11. Data Security and Sharing

    • We use SSL/TLS encryption for all data transmitted to and from this site
    • Passwords are stored only as secure cryptographic hashes; nobody, including us, can read them
    • Your account and practice data is stored with our database provider (Supabase) and is accessible only to your account and to us as operator; it is never shared with advertisers
    • Payment details are handled entirely by Stripe and never reach our systems
    • We do not sell your personal information for money. However, when you consent to advertising cookies, advertising partners (including Google) receive and process data such as cookie identifiers and browsing activity to serve and measure ads. Under laws such as the GDPR and the California Consumer Privacy Act, this can be considered "sharing" of personal data for targeted advertising

    12. Your Rights

    Subject to applicable law, you have the right to:

    • Access the personal data held about you
    • Request correction or deletion of your personal data, including deletion of your entire account
    • Object to or restrict certain processing
    • Request portability of your data
    • Withdraw your consent to analytics and advertising cookies at any time
    • Disable cookies in your browser and opt out of Google Analytics and personalized advertising using the tools above

    To exercise any of these rights, including account deletion, contact us using the details below and we will act on your request. If you are in the European Union and believe your data has been handled improperly, you also have the right to lodge a complaint with your local data protection authority. In France, this is the Commission Nationale de l'Informatique et des Libertes (CNIL).

    13. Updates to This Policy

    We may update this policy periodically. Check the "Last updated" date above for the latest version. For material changes affecting account holders, we will inform you.

    14. Contact Us

    For privacy concerns, questions, or requests, contact us at [email protected].