Privacy policy

Who we are

PolMock is an independent practice tool for the Polish state certificate exam (egzamin certyfikatowy z języka polskiego jako obcego). We are not affiliated with the Państwowa Komisja ds. Poświadczania Znajomości Języka Polskiego jako Obcego or certyfikatpolski.pl. For any privacy question, contact us at [add your contact email].

What we do NOT collect

• No advertising or analytics cookies, and no third-party trackers.
• Your practice answers, timers and results stay in your browser — they are not sent to us or stored on our servers.

Accounts & sign-in

Creating an account is optional (you can practice without one). If you sign in:

• Social sign-in (Google, Apple, Facebook, X): the provider shares your basic profile (name, email, avatar) so we can create your account. We store that in our database and use it only to identify you.
• Email & password: we store your email, name (optional) and a hashed password (never the plain text), and send a confirmation email via Resend to verify the address.
• Session cookie: a strictly-necessary cookie keeps you signed in. It is not used for advertising or tracking.

Processors involved: the sign-in provider you choose, Resend (email delivery), and Cloudflare (hosting/database). You can delete your account at any time by contacting us.

Data we DO process

1. Text you submit for AI writing assessment

The writing modules are optional. If you press "Get an AI estimate", the text you wrote is sent to Anthropic PBC (United States), our AI processor, solely to generate the assessment shown back to you. We do not store your essay on our servers, and we do not use it to identify you. Do not include personal or sensitive information in practice essays.

2. Error reports

If you report a question, we store the question's ID, its level, an optional short reason you type, and a timestamp — used only to review and fix content. Please do not include personal information in the reason field.

3. Listening audio

Listening recordings were generated once, in advance, with Microsoft Azure's text-to-speech service and are served as static files. No data about you is sent to Azure when you play them.

Legal basis & international transfer

Where the GDPR applies, we process the text you submit for AI assessment on the basis of your request to use that optional feature (your consent / performance of the service you asked for). Anthropic processes it in the United States under its data-processing terms and the applicable Standard Contractual Clauses. We keep error-report data on the basis of our legitimate interest in maintaining accurate content.

Retention

We do not retain your submitted essays after the assessment is returned. Error reports are kept only until the reported content has been reviewed.

Your rights

Under the GDPR you may request access to, correction of, or erasure of your personal data, and may object to processing. Because we hold no accounts and minimal data, we may be unable to identify data as yours. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).

Changes

We may update this policy; material changes will be reflected in the "last updated" date above.