Privacy policy

Account: your email address, an optional display name, and your password — stored only as a bcrypt hash, never in a readable form.

Practice records: which questions you answered, whether each answer was right, and the mode, score, time and streak of each session. If you are signed in this is tied to your account; if you are not, it is tied to a random device identifier in a cookie.

Daily counters: how many questions have been graded for you today — kept per account, or per anonymous device identifier.

Email records: when you request a password reset, the message is sent through one of our email providers and the delivery attempt is logged (which provider carried it, whether it was accepted). Nothing else is sent to you unless you ask us something.

Usage counts: which screens of the product were seen and which of a fixed list of actions were taken (for example "saw the pricing page", "started a quiz", "was refused at the free limit"), tied to the same account-or-device identifier. This is how we find the places the product loses people. It records counts and short fixed labels only — no free text, no IP address, no user agent, no third-party analytics script, and it is not shared with anyone.

Cookies: `session` (keeps you signed in — not readable by scripts), `cqlang` (your language choice), `cqtheme` (light or dark), `cqdevice` (the anonymous daily allowance). There are no advertising cookies and no third-party trackers.

In your browser only: an unfinished quiz you did while signed out, your study-guide notes and a cached copy of the guide are stored locally on your device and are never uploaded. Clearing your browser data removes them.

We do not sell your data, share it with advertisers, or build profiles of you across other sites. There are no analytics or advertising scripts from third parties on this site.

We do not use your email for marketing. It is used for signing in, for password resets you request, and for replying to you.

When paid plans are open, the payment is processed by Stripe. Your card details are entered on Stripe’s own checkout and never reach our servers — we only receive confirmation that a payment succeeded, and an identifier for the customer.

We do not see or store card numbers, expiry dates or security codes at any point.

The application and its database run on a server we operate in the European Union. Email is delivered through Resend, Mailgun or Brevo (whichever is available first), and payments — when they are open — through Stripe. Each of these processes data only to provide its service to us.

Account and practice data: until you delete the account. Nothing expires on its own.

Daily counters: one row per day, kept as history for the streaks shown in your progress.

Password reset links: valid for one hour, then unusable.

Email delivery logs: short records used to keep the reset mail working.

Delete everything yourself: Account → Security → Delete account. That removes the account and its practice records immediately and permanently.

Change your email, name or password at any time from the account page.

Ask us anything else — a copy of your data, a correction, or a question about this page — by writing to the address on the contact page.

This is study material for people preparing for the Canadian citizenship test. It is not directed at children under 13, and we do not knowingly keep their data.

If this policy changes, the date at the top changes with it. If a change is significant for you, account holders get an email.

CitiQuiz Canada is not affiliated with, endorsed by, or connected to the Government of Canada or Immigration, Refugees and Citizenship Canada.