Skip to content

Last updated 22 August 2026

Privacy

The short version: you can use every question, answer and explanation on this site without an account, and if you do that we hold nothing that identifies you. Everything below describes what changes when you sign in, pay, or arrive from an advert.

Who is responsible

Practice Citizenship is operated by Gaudas Palubaitis (Sole trader), Laisvės al. 49, Kaunas, Lithuania. For anything on this page, including a request to see or delete your data, write to support@practicecitizenship.com.

We are established in Lithuania, so EU GDPR governs this notice and the Lithuanian State Data Protection Inspectorate (VDAI) is our lead supervisory authority. Because the site is aimed at the UK, Australia and Canada, UK GDPR, the Australian Privacy Principles and Canada’s PIPEDA also apply to visitors from those countries. Where they differ we have followed whichever is stricter.

If you never sign in

Practising without an account creates no record tied to you. Your progress is kept in your own browser’s local storage and never leaves the device unless you later create an account, at which point you are asked before it is transferred.

Our servers keep ordinary request logs, which include your IP address, for a short period for security and debugging. We do not use them to build a profile of you.

If you create an account

We hold:

  • Your email address, because signing in works by sending a link to it.
  • Your practice attempts and answers, so your progress and weak areas survive a new device.
  • Whether you have Pro, and your Stripe customer reference.
  • A random identifier for the browser you use Pro on, so one purchase stays on one device. It is a random value we generate — not a fingerprint, and it says nothing about your hardware.

We never ask for your name, address, date of birth, nationality, visa status or immigration history, and there is nowhere on this site to enter them. Nothing here is shared with any government.

If you buy Pro

Payments are handled entirely by Stripe. Card numbers are entered on Stripe’s own checkout page and never reach our servers. We receive confirmation that a payment succeeded, the amount, and your email address.

If you arrive from an advert

When you reach the site by clicking one of our adverts, the link carries an identifier that Google or Microsoft added to it. We store that identifier in a cookie for 90 days, and if you later buy Pro we report the sale back to the advertising platform so we can tell which adverts are worth paying for.

What is sent is the click identifier and the fact that a purchase followed it. We do not send what you practised, how you scored, or anything you did on the site. If you did not arrive from an advert, no such cookie is set.

Cookies

CookieWhyKept forNeeded?
sb-*-auth-tokenKeeps you signed in after you click a magic linkUntil you sign outEssential
pc_attrRecords the advertising click that brought you here, so we can tell which adverts work90 daysOptional
_ga, _ga_*Google Analytics — counts visitors and which pages they use2 yearsOptional

The optional ones can be removed at any time by clearing cookies for this site, and blocking them costs you nothing — every question and test keeps working.

Who else sees your data

Only the services that make the site run. None of them are permitted to use your data for their own purposes, and we do not sell data to anyone, ever.

ServiceWhat forWhat reaches it
VercelHosting and content deliveryIP address and request metadata, in server logs
SupabaseDatabase and sign-in linksEmail address, practice attempts and answers, plan status
StripePaymentsEmail address and payment details. Card numbers never reach our servers
Google Analytics 4Traffic measurementPseudonymous usage events and a cookie identifier
Google AdsMeasuring which adverts lead to a purchaseThe advertising click identifier from your arrival URL, and the fact that a purchase followed it
UmamiPrivacy-preserving page analytics, self-hostedPage views. No cookie, no cross-site identifier

How long we keep it

Account data is kept while your account exists. Pro is a one-time purchase with no expiry, so we keep the record of it for as long as you might reasonably expect access. Payment records are kept for as long as tax law requires, which is longer than you might expect and is not something we can shorten on request.

Your rights

You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email support@practicecitizenship.com and we will act within 30 days.

Deleting your account removes your email address, attempts and answers. It does not remove the payment record, for the tax reason above.

If you think we have handled your data badly you can complain to a regulator: the VDAI in Lithuania, where we are established, or your own national one — the ICO in the UK, the OAIC in Australia, or the Office of the Privacy Commissioner in Canada. We would rather you told us first.

Children

This site is for adults preparing for a citizenship test and is not directed at children. We do not knowingly collect data from anyone under 16.