Privacy, plainly

The controller is Asif Nagarkatti, operating from Dubai, United Arab Emirates. Contact privacy@examrivet.com for privacy requests.

Information and purposes

If you join, we collect your email, consent version and time, and confirmation/unsubscribe status to manage the interest list. Optional result sharing links your sample result to that email only when you select it. A sample session stores a random identifier, answers, score and start/completion times to show results and understand product interest. No account or payment is required.

Legal basis

Where the GDPR applies, email updates and optional result linking rely on your consent under Article 6(1)(a). You can withdraw it at any time without affecting earlier lawful processing. Operating the requested sample, proportionate abuse prevention and first-party completion statistics rely on legitimate interests under Article 6(1)(f): providing reliable practice and understanding whether it is useful. You may object to that processing by contacting us. These bases do not override any additional requirements of applicable UAE law.

Locations and providers

Our Cloudflare D1 database is configured for the European Union jurisdiction. Operator access takes place from Dubai, United Arab Emirates; EU database storage does not mean that all processing stays in the EU. Cloudflare operates a global network for hosting and abuse prevention; the D1 database is restricted to the EU. Resend sends this domain’s email through Tokyo, Japan (ap-northeast-1); its DPA identifies primary processing in the United States. Provider DPAs provide contractual transfer safeguards, including standard contractual clauses where applicable. Operator access is from Dubai, United Arab Emirates. These services are not EU-only.

Cloudflare provides hosting, D1 storage and Turnstile abuse protection. Resend delivers confirmation and requested update emails. Network, security, support and email processing can involve other countries. Contact us for the applicable processor terms and safeguards. We do not claim that every service is EU-only or that every international transfer has an adequacy decision.

Confirmation and retention

A confirmation link expires 48 hours after the signup request. An unconfirmed signup is retained for up to 7 days, allowing a new confirmation request; it is then removed by daily cleanup. These are different periods. Unsubscribed records expire after 30 days, confirmed contacts after 365 days, and sample sessions after 90 days. Daily cleanup can add up to one day. Providers may retain delivery records and backups under their own schedules.

Your choices and rights

Results do not require an email. Use the management link in your confirmation email to unsubscribe or delete your signup and linked result, or contact us to request access, correction, erasure, restriction, portability where applicable, or to object. You may complain to the competent data-protection authority. We do not make automated decisions with legal or similarly significant effects about you.

Browser and technical data

No advertising cookies or third-party analytics are used. Sample progress stays in browser memory and resets on refresh. Cloudflare processes technical request information for hosting and spam protection. We do not put IP addresses in the interest or sample database.

Privacy notice version: sample-interest-2026-11-10. Updated 10 November 2026.

Back to ExamRivet