Cookie Policy

1. What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies — local storage, session storage and pixel tags — work in much the same way. They let a site remember you between requests, keep you signed in, and measure how features are used.

2. Categories we use

Strictly necessary

Required for the site to work. These cannot be turned off without breaking core features such as logging in, completing checkout, or submitting an exam answer. Examples:

• sb-access-token, sb-refresh-token — Supabase Auth session.
• __Host-csrf — protection against cross-site request forgery on form submissions.
• Stripe session cookies during checkout.

Functional

Remember your preferences (locale, theme, last-used dashboard tab) so you don't have to set them on every visit. They are not used for marketing.

Analytics

Usage data that helps us understand which pages and features are useful. We use Google Analytics 4, which sets these cookies:

• _ga — distinguishes visitors. Duration: 2 years.
• _ga_G81WWG3G16 — holds session state. Duration: 2 years.

These are only set if you choose "Accept all" on the cookie banner. They are not required for the site to work. We also use Vercel Web Analytics, which is genuinely cookieless.

Marketing

We do not use third-party advertising or retargeting cookies on this site at the time of writing. If we add any in the future, this policy and the consent banner will be updated first, and we will only set them after you opt in.

3. Managing your choices

On your first visit we show a banner with two options: "Necessary cookies only" and "Accept all". Decline and the Google Analytics script is never loaded at all — there is no request to block. If you accepted earlier and then decline, the _ga cookies already set are deleted.

Your choice is stored in a __consent cookie for 180 days, after which we ask again. You can change it at any time via the "Cookie settings" link at the bottom of any page. Most browsers also let you block or delete cookies — be aware that strictly-necessary cookies are required for login and checkout to work.

• Chrome
• Firefox
• Safari
• Microsoft Edge

4. How long cookies last

Session cookies expire when you close the browser. Persistent cookies last anywhere from a few days to a year depending on purpose; auth tokens are short-lived and refreshed automatically.

5. Updates

We update this policy whenever we change the set of cookies we use. The "last updated" date at the top reflects the most recent revision. Significant changes will trigger a fresh consent prompt.

6. Contact

For questions about this policy, please reach out via the contact page.

The controller is TestPrep LLC., trading as TestPrep Europe — 777 NW 72nd Ave STE 1075, Miami, FL 33126, United States. Istanbul office: Acıbadem, Acıbadem Cd. No: 188 D:1, 34660 Üsküdar/İstanbul.