Privacy policy

Last updated: November 3, 2026

1. Who is responsible and how to contact us

The personal data collected through EngliMock is processed by Davlatov Davron (the operator). For questions, requests or complaints, contact us here:

Telegram: @hertz220
Email: elton16091982@gmail.com

2. What data we collect

You can take tests without signing in. As a guest, no personal data is collected: your answers are sent to the server only to be marked and are not stored, and your progress and result stay in your browser (section 7).

If you sign in, we store the following:

Signing in with Google: your name, your Google account identifier and your email address (only if Google marks it as verified).
Signing in with Telegram: your Telegram ID, name and username (if you have one).
Account details: the interface language when the account was created, your role (student, teacher or administrator), and the dates the account was created and each sign-in method was linked.
Saved attempts: which test, your answers, whether each answer was correct, your score, the estimated band, and when you started and submitted the test.
For teachers: comments and decisions left while reviewing content (with the author's name, visible to other reviewers).
Writing: your essay text, word count and grading status; very short answers receive automatic scores. AI grading is not active yet.

We do not collect profile photos, phone numbers, passwords or payment details.

3. Why we use it

to save your results and show them in your account (attempt history, band trend, weakest question types);
to let you sign in and keep your account secure;
to let teachers review and approve content.

4. Legal basis

The basis is your consent: by signing in with Google or Telegram, you agree to the storage of the data described in this policy. You can withdraw consent at any time by deleting your account (section 9).

5. Where the data is stored

Data is stored and processed outside Uzbekistan, on servers in Germany:

database — Neon (Amazon Web Services, Frankfurt);
server functions (signing in, saving and reading results) — Vercel (Frankfurt, fra1). Static pages are delivered through Vercel's global CDN and contain no personal data;
Listening audio files — Cloudflare R2. Only test audio is stored there; it holds no personal data.

6. Third parties

Google and Telegram — for signing in. You grant permission on their page, and they send us the data listed in section 2.
Vercel and Neon — hosting for the site and the database (section 5). While handling requests, the hosting provider sees IP addresses and browser details; we do not store these in our database.
Google Cloud Text-to-Speech — to produce the Listening audio. Only the test script is sent to it, never user data.

7. Cookies and browser storage

The site uses only the cookies and browser storage it needs to work. There are no advertising, analytics or tracking cookies, so no consent banner is shown.

Name	Purpose	Duration
`__Secure-session`	Signed-in session: user identifier, role and token version (encrypted).	30 days
`has_session`	Signals that a session exists, so the page knows whether to request account details.	30 days
`__Host-login-intent`	Sign-in intent: provider, return page, interface language and a security code (encrypted).	10 minutes
`__Secure-authjs.state, __Secure-authjs.pkce.code_verifier, __Secure-authjs.nonce`	Security checks for signing in with Google/Telegram (OAuth).	15 minutes
`__Secure-authjs.callback-url`	The page to return to after signing in or out.	Until the browser is closed
`NEXT_LOCALE`	Your chosen interface language.	Until the browser is closed; 1 year once you use the language switcher
`localStorage: theme`	Light or dark theme.	Until you clear it
`localStorage: ielts:exam:font`	Text size in the exam.	Until you clear it
`localStorage: ielts:reading:…, ielts:listening:…, ielts:writing:<testId>:v1`	Test progress: answers, flags, notes on the text, timer and result, so nothing is lost if the page reloads.	Until you restart the test or clear it
`sessionStorage: …:login`	A temporary copy of your result while you sign in (it is saved to your account afterwards).	Until the tab is closed

8. How long we keep it

Account details and saved attempts are kept until you delete your account. Data in your browser stays until you clear it (or until the duration shown in the table).

9. Your rights

Access: your saved results are on the Results page, and your account details on the Account page.
Deletion: the "Delete account" button on the Account page immediately and permanently deletes your account, linked sign-in methods and all saved results. Accounts with teacher comments are deleted on request through our contacts.
Other requests (correcting data, questions) — through our contacts:

Telegram: @hertz220
Email: elton16091982@gmail.com

10. Children and teenagers

If you are under 18, ask a parent or guardian for permission before signing in. As a guest, you can take tests without giving any personal data. If you learn that a minor's data has been stored without consent, contact us and we will delete it.

11. Changes to this policy

If this policy changes, the new text is published on this page and the "Last updated" date at the top changes. If we start collecting more kinds of data, this page will say so before the change takes effect.