Privacy

Who is responsible

The data controller is [to be completed], self-employed (autónomo) in Spain, NIF [to be completed], [to be completed], the publisher of Scaled. Contact: our support e-mail (address coming soon).

What we keep

• Your account: name, e-mail, and your password in a scrambled form (salted hash).
• Your work: answers, scores, timing, essays, notes, marked or reported questions, vocabulary progress, test date, goal and settings, and the feedback you send.
• Your plan: Free or Pro, the end of the current period, and the Stripe customer and subscription numbers. Your card details go to Stripe only; we never see them.
• When you last signed in, the link you first came from (for example a "?src=" tag) if any, and the connection address used to create an account (to block mass sign-ups, kept one hour).

Why

To run your GRE preparation (practice, results, study plan), your Pro subscription, and the security of the site. The legal basis is the contract you accept when you create your account (GDPR art. 6(1)(b)), the legal obligations on invoices and payments (art. 6(1)(c)), and our legitimate interest in keeping the site secure and knowing which links bring visitors (art. 6(1)(f)). Your data is never sold, never used for advertising, and never shared for any other purpose.

Who can see it

• You.
• The Scaled administrator, when needed to help you or fix a problem.
• Cloudflare (hosting and database, Western Europe region), Stripe (payments) and Resend (e-mails such as password resets), acting on our instructions under GDPR data-processing terms. Transfers outside the EU are covered by the European Commission's standard contractual clauses.

Cookies and storage

One cookie only, needed to open the questions while you are signed in, and one for the administrator. No advertising or analytics cookies, so there is nothing to accept. The site also keeps your session, your settings and a copy of your progress in your browser so it works offline; signing out removes the session.

How long

Your account is kept until you delete it, at any time, from your account page ("Delete my account"). Everything is erased at once and a Pro subscription is cancelled. Payment records are kept by Stripe and by us for the period Spanish tax and accounting law requires (up to 6 years).

Your rights

You can see, correct, download or delete your data, and object to its use: from your account page ("Download my data", "Delete my account"), or by writing to our support e-mail (address coming soon); we answer within one month. You can also complain to the Spanish data protection authority, the AEPD (Agencia Española de Protección de Datos, aepd.es), or to the authority of the EU country where you live.