Privacy policy

Keeleproov is an independent practice tool for the Estonian language proficiency exams (eesti keele tasemeeksamid) and the Estonian citizenship exam. We are not affiliated with Harno or any state body. For any privacy question, contact us at contact@keeleproov.com.

The operator's registered address and tax identifier are printed in the footer of every email we send, so a message claiming to be from Keeleproov can be checked against them.

• We use Google Analytics 4 to understand how the site is used, and Google Ads conversion measurement to see which adverts lead to a sign-up or purchase. Both are provided by Google.
• We also use the Meta Pixel (Facebook and Instagram advertising), provided by Meta Platforms Ireland Ltd, to measure which of our social adverts lead to a visit or a purchase.
• Nothing is stored on your device until you agree. The Google tag loads with every consent signal set to denied, which sets no analytics or advertising cookies and sends only cookieless pings. The Meta Pixel is stricter still: it is not loaded at all — not even the script file — unless you accept analytics, so until you do, Meta is not contacted and learns nothing about your visit. If you accept, that consent is passed to Google and the Meta Pixel is loaded, and measurement cookies may then be set. You can change or withdraw your choice at any time via "Cookie settings" in the footer; withdrawing stops the pixel sending anything further. Your choice stands for six months, after which we ask again — consent is about what the site does now, not what it did a year ago. A refusal expires on the same clock.
• If you are signed in when you complete a purchase, we send Google a SHA-256 hash of your email address so a conversion can be matched to the advert that produced it. Google receives the hash, never the address itself. We do not send Meta your email address in any form, hashed or otherwise.
• A single strictly-necessary cookie remembers your chosen interface language, and (only if you sign in) a session cookie keeps you logged in. Neither is used for advertising.

Creating an account is optional (you can practise without one). If you sign in:

• Google sign-in: Google shares your basic profile (name, email) so we can create your account. We store that in our database and use it only to identify you.
• Email & password: at sign-up we store your email, first and last name, date of birth, nationality and target exam level (to personalise your practice), plus a hashed password (never the plain text). We send a confirmation email via Resend to verify the address.

Processors involved: Cloudflare (hosting and database), Resend (email delivery), Google (analytics and advertising measurement as described above, and sign-in if you use it), Meta Platforms Ireland (advertising measurement, only if you accept analytics), and — if you buy a pass — Stripe (payment processing). We never see or store your card details; Stripe handles payment data directly. We store only that your account has paid access, the amount and a payment reference. If your visit arrived from an ad, the order record also keeps the campaign parameters that visit carried (such as a click identifier) so we can tell which advertising pays for itself; this stays in our own records and no advertising platform can read it from us automatically. You can delete your account at any time by contacting us.

1. Mock and practice answers. Your browsing and timers stay on your device. When you submit a mock or an interactive question-bank practice for scoring, your answers are sent to our server to compute the result; if you are signed in, the result (scores per part, pass/fail) is saved to your progress history so you can track improvement.

2. Text you submit for AI writing assessment. The writing feedback is optional. If you press "Get an AI estimate", the text you wrote is sent to Anthropic PBC (United States), our AI processor, solely to generate the assessment shown back to you. We keep the text you submitted for 90 days, stored next to the score it produced, so you can reread it beside that score; after 90 days it is deleted automatically. You can see everything we still hold, and delete it yourself immediately, on your profile page — or ask us and we delete it at once. Do not include personal or sensitive information in practice essays.

3. Error reports. If you report a question, we store the question's ID, its level, an optional short reason you type, and a timestamp — used only to review and fix content. Please do not include personal information in the reason field.

4. Listening audio. Listening recordings are generated once, in advance, with Microsoft Azure's text-to-speech service and are served as static files. No data about you is sent to Azure when you play them.

5. Speaking recordings. The speaking task is optional and nothing is recorded until you press record and your browser asks for the microphone. When you finish a take, the audio is sent to Cloudflare Workers AI to be turned into text, and the text is then assessed the same way a written answer is (Cloudflare Workers AI, or Anthropic PBC (United States) if the first is unavailable). We never store the audio. It exists only for the length of that one request, is not written to any database or file storage, and cannot be played back by us or by anyone else. If you are signed in, what we keep from a take is the score it produced (a number out of 100) against that sitting and the transcript, for the same 90 days as a written answer and in the same place — the transcript is the text that was actually marked, so keeping the mark without it would leave a grade nobody could check. It is shown on your profile page, where you can delete it at once. The audio itself is kept in no form whatsoever and cannot be reconstructed from what we hold. Please do not say anything personal or sensitive in a practice recording.

We send two different kinds of email, and they are not governed by the same rule.

• Service email — your confirmation link, and a follow-up about a mock you actually sat. These relate to the service you asked for, and every one of them carries a one-click unsubscribe link that stops them for good.
• Marketing email — study tips, offers and exam news. We send these only if you have ticked the optional consent box at sign-up or in your profile. The box is never pre-ticked and creating an account does not depend on it.

We record when you gave that consent, which version of the wording you were shown, and where you gave it, so that we can demonstrate it. You may withdraw it at any time by unticking the same box in your profile or by using the unsubscribe link in any email; withdrawing is as easy as giving and takes effect immediately. Withdrawal does not affect anything sent before it.

Where the GDPR applies: we process your account and result data to provide the service you signed up for (performance of a contract); we process the text you submit for AI assessment on the basis of your request to use that optional feature; we process a speaking recording only on your own request to use that optional feature, and only to produce the transcript and assessment you asked for; we send marketing email only on the basis of your consent, which you may withdraw at any time; and we keep error-report data on the basis of our legitimate interest in maintaining accurate content. Anthropic processes submitted text in the United States under its data-processing terms and the applicable Standard Contractual Clauses.

Text you submit for AI assessment — an essay, or the transcript of a speaking take — is kept for 90 days from the day it was marked and is then deleted automatically. You can read it and delete it yourself at any time on your profile page, and a deletion request sent to us is actioned immediately. Speaking audio is never retained at all: it is discarded as soon as it has been turned into text. Account and progress data are kept until you delete your account. Error reports are kept only until the reported content has been reviewed. A record of your marketing-consent decision — the date, the wording version and whether it was later withdrawn — is kept for as long as we may need to demonstrate it, and survives the withdrawal itself, which is what makes it proof.

Under the GDPR you may request access to, correction of, or erasure of your personal data, and may object to processing; contact us to exercise these rights. You also have the right to lodge a complaint with a supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon).

We may update this policy; material changes will be reflected in the "last updated" date above.

The binding version of this policy is the Estonian one, published at keeleproov.com/privaatsus. This English text is provided for convenience; where the two differ, the Estonian text governs. The other languages on this site are interface translations, not legal versions.