Privacy Policy
This policy describes what information apti22 collects when you practice on our platform, how that information is used to support your assessment training, and your rights over your data.
1. Overview & Core Philosophy
apti22 is an independent cognitive aptitude and technical assessment practice platform. We believe in keeping data collection minimal and straightforward.
2. Information We Collect
A. Google Account Profile (When Signed In)
If you sign in using Google, we receive basic profile information provided by Google OAuth: your Google user ID, display name, email address, and profile photo URL. This data is used solely to identify your account and personalize your assessment history.
B. Assessment Attempts & Telemetry
When you take cognitive challenges or technical quizzes, we record test results including scores, question answer correctness, time taken per question, levels reached, and error breakdown diagnostics. For signed-in users, this is saved to our database to maintain cross-device history. For guest users, this remains solely in your browser's local storage.
C. Feedback Submissions
If you are signed in and choose to submit platform feedback, we record your message along with your user ID, display name, email, and basic technical context (the current page and browser user-agent) to help us troubleshoot and improve the experience.
D. Operational Server Logs
Our cloud hosting infrastructure (Vercel) automatically logs standard HTTP request data (such as IP address, request method, and page requested) to safeguard system stability, protect against DDoS attacks, and diagnose server errors.
3. How We Use Your Data
- Session Authentication: Keeping you logged in securely while you navigate the site.
- Performance Tracking: Generating accuracy ratings, session histories, level milestones, and diagnostic review reports.
- Anti-Repeat Rotation: Ensuring question samplers rotate questions evenly without repetition across attempts.
- Platform Improvements: Reviewing user feedback and technical bug reports to refine assessment simulations.
4. Storage & Infrastructure Providers
We rely only on verified enterprise-grade infrastructure providers to run apti22:
- Vercel Inc.: Application hosting, edge delivery, and serverless compute.
- MongoDB Atlas: Managed cloud database storage with encryption at rest and TLS encryption in transit.
- Google Identity Services: OAuth 2.0 authentication provider.
5. Cookies & Local Storage
We do not use advertising or third-party tracking cookies. We only use:
- Essential Session Cookies: NextAuth HTTP-only session cookies required for authentication and CSRF token protection.
- Browser Local Storage: Used to store your theme preference (light/dark mode) and local guest assessment progress.
6. Your Rights & Account Deletion
You retain full control over your data:
Local Reset: You can clear all local assessment history, levels, and cached questions anytime by clicking the Reset button in the navigation header.
Account Deletion: If you wish to delete your signed-in account and all associated test attempt records from our database, email us at apti22.work@gmail.com. We will process your deletion request promptly within 14 business days.
7. Contact Us
For any privacy inquiries, data requests, or questions regarding this policy, reach out directly to our team: