Privacy notice

Last updated 26 September 2026

DipIMC.Ninja is run by {{controller}}. Contact: {{contact_email}}.

The short version

• You don't need an account, and without one your progress never leaves your browser.
• With an account, we store your sign-in identity and your revision progress, and nothing else. A question you flag while signed in records your account.
• No tracking, no analytics, no advertising, no marketing email, and nothing is sold or shared.

Without an account

Your progress is kept in your browser's local storage on your own device: attempts, scores, badges, profile, reading list and settings. We never see it. Clearing your browser's site data deletes it, and you can export it from the Profile page.

With an account

Signing in. You can sign in with an email link, or with Google, Apple or Microsoft.

• By email: we receive the address you type, and a name if you give one. There is no password. The link is kept, with the network address it was requested from (to stop abuse), for at most a day.
• Through Google, Apple or Microsoft: we receive your name, your email address and a stable identifier for your account there.
• Apple will pass a private relay address instead of your real one if you ask it to.
• A work or university Microsoft account tells us the same three things and nothing about your work.

What we store: your sign-in identity, together with your attempts, scores, badges, profile (name, optional registration number, weekly targets, theme and any dates you add to your plan) and reading list. We store them so your progress follows you between devices.

Lawful basis: we store this to provide the service you asked for by signing in.

Where it is stored: on Cloudflare's platform. The database (Cloudflare D1) is in Cloudflare's Western Europe region; requests are handled by Cloudflare Workers at the data centre nearest you.

Email we send: only the sign-in link, and only when you have just asked for one. It goes out through an email delivery service, which receives your address only to deliver it.

Question flags: if you press "Flag this", we store the question id, the reason and any note you type. If you are signed in at the time, the flag also records your account, so a flag can be followed up; if you are not, it is anonymous. If you delete your account, your flags stay but are no longer linked to anyone.

Cookies: a single session cookie keeps you signed in, for up to 90 days or until you sign out. There are no tracking or advertising cookies.

Donations: the "buy me a coffee" link goes to PayPal. PayPal's own privacy notice covers anything you do there. As with any PayPal payment, the recipient sees the payment and the name and email address PayPal shows with it. That information is used only to acknowledge the gift, and it is never linked to your revision progress.

Your rights

• Delete your account from the Profile page. Your account, profile, every attempt, badge, reading-list item and sign-in identity, and any unused sign-in link are removed from the database. Progress this browser kept before you signed in stays in its local storage until you clear it or reset it from the Profile page.
• Get a copy of your data with Export on the Profile page: it downloads your attempts, scores, badges, profile and reading list as a file. Your name, email address and sign-in methods are shown on the Profile page.
• Anything else: for any other request, or a complaint, email {{contact_email}}. You can also complain to the Information Commissioner's Office (ico.org.uk).