Last updated 22 August 2026
Privacy
The short version: you can use every question, answer and explanation on this site without an account, and if you do that we hold nothing that identifies you. Everything below describes what changes when you sign in, pay, or arrive from an advert.
Who is responsible
Practice Citizenship is operated by Gaudas Palubaitis (Sole trader), Laisvės al. 49, Kaunas, Lithuania. For anything on this page, including a request to see or delete your data, write to support@practicecitizenship.com.
We are established in Lithuania, so EU GDPR governs this notice and the Lithuanian State Data Protection Inspectorate (VDAI) is our lead supervisory authority. Because the site is aimed at the UK, Australia and Canada, UK GDPR, the Australian Privacy Principles and Canada’s PIPEDA also apply to visitors from those countries. Where they differ we have followed whichever is stricter.
If you never sign in
Practising without an account creates no record tied to you. Your progress is kept in your own browser’s local storage and never leaves the device unless you later create an account, at which point you are asked before it is transferred.
Our servers keep ordinary request logs, which include your IP address, for a short period for security and debugging. We do not use them to build a profile of you.
If you create an account
We hold:
- Your email address, because signing in works by sending a link to it.
- Your practice attempts and answers, so your progress and weak areas survive a new device.
- Whether you have Pro, and your Stripe customer reference.
- A random identifier for the browser you use Pro on, so one purchase stays on one device. It is a random value we generate — not a fingerprint, and it says nothing about your hardware.
We never ask for your name, address, date of birth, nationality, visa status or immigration history, and there is nowhere on this site to enter them. Nothing here is shared with any government.
If you buy Pro
Payments are handled entirely by Stripe. Card numbers are entered on Stripe’s own checkout page and never reach our servers. We receive confirmation that a payment succeeded, the amount, and your email address.
If you arrive from an advert
When you reach the site by clicking one of our adverts, the link carries an identifier that Google or Microsoft added to it. We store that identifier in a cookie for 90 days, and if you later buy Pro we report the sale back to the advertising platform so we can tell which adverts are worth paying for.
What is sent is the click identifier and the fact that a purchase followed it. We do not send what you practised, how you scored, or anything you did on the site. If you did not arrive from an advert, no such cookie is set.
Cookies
| Cookie | Why | Kept for | Needed? |
|---|---|---|---|
| sb-*-auth-token | Keeps you signed in after you click a magic link | Until you sign out | Essential |
| pc_attr | Records the advertising click that brought you here, so we can tell which adverts work | 90 days | Optional |
| _ga, _ga_* | Google Analytics — counts visitors and which pages they use | 2 years | Optional |
The optional ones can be removed at any time by clearing cookies for this site, and blocking them costs you nothing — every question and test keeps working.
Who else sees your data
Only the services that make the site run. None of them are permitted to use your data for their own purposes, and we do not sell data to anyone, ever.
| Service | What for | What reaches it |
|---|---|---|
| Vercel | Hosting and content delivery | IP address and request metadata, in server logs |
| Supabase | Database and sign-in links | Email address, practice attempts and answers, plan status |
| Stripe | Payments | Email address and payment details. Card numbers never reach our servers |
| Google Analytics 4 | Traffic measurement | Pseudonymous usage events and a cookie identifier |
| Google Ads | Measuring which adverts lead to a purchase | The advertising click identifier from your arrival URL, and the fact that a purchase followed it |
| Umami | Privacy-preserving page analytics, self-hosted | Page views. No cookie, no cross-site identifier |
How long we keep it
Account data is kept while your account exists. Pro is a one-time purchase with no expiry, so we keep the record of it for as long as you might reasonably expect access. Payment records are kept for as long as tax law requires, which is longer than you might expect and is not something we can shorten on request.
Your rights
You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email support@practicecitizenship.com and we will act within 30 days.
Deleting your account removes your email address, attempts and answers. It does not remove the payment record, for the tax reason above.
If you think we have handled your data badly you can complain to a regulator: the VDAI in Lithuania, where we are established, or your own national one — the ICO in the UK, the OAIC in Australia, or the Office of the Privacy Commissioner in Canada. We would rather you told us first.
Children
This site is for adults preparing for a citizenship test and is not directed at children. We do not knowingly collect data from anyone under 16.