Privacy policy
Updated: 31 October 2026. La version française fait foi.
Who is responsible
NCLC Prep is run by Valdemar Kobelis, sole trader established in Lithuania (individuali veikla), individual activity certificate No. 1432566 in the Lithuanian taxpayer register (VMI), Sidaronių g. 19, LT-06234 Vilnius, Lithuania. He is also the person in charge of the protection of personal information under Quebec’s Law 25. Contact: bonjour@nclcprep.com.
What we collect and why
- Your texts and their evaluations, to show and send them to you. Kept 30 days, then deleted. If you join the pre-exam group, kept 12 months to check our estimates.
- A random browser identifier, stored in your browser, to count your free evaluations. We keep only an encrypted fingerprint of it.
- Your pass key, if you buy one. We keep only an encrypted fingerprint of it, plus an encrypted copy for 7 days after you start paying, to email it to you.
- The email address you enter at checkout, passed on by Stripe, to deliver your purchase: we send your pass key to it once. We do not keep it.
- Your email address and exam date, only if you give them, to send your correction and a reminder. Unconfirmed: deleted after 7 days. Otherwise: until you unsubscribe or 30 days after your exam. With no exam date, or in the pre-exam group, 12 months at most.
- Your official score, only if you give it in the pre-exam group, to measure the gap with our estimates.
- Daily page view counts, and the arrival source (Google search, Reddit, a link…) counted per day with evaluations and purchases, with no identifier and no link to your texts. None of this is counted if your browser has Global Privacy Control or Do Not Track on, or if you refuse it below. Kept 25 months.
- Your IP address, as an encrypted fingerprint kept 2 days, against abuse.
Encrypted backup copies may keep this data for up to 35 more days. We use no advertising cookies and no third-party analytics. We sell no data.
Payment
Payment and sales tax are handled by Stripe. We never see your card number. Stripe processes your payment data under its own policy.
Transfers outside Quebec
To run the service we share data with providers outside Quebec: Google (Gemini on Vertex AI, European Union) for the AI evaluation, with no AI training on your texts (Google may keep a text flagged by its abuse filters for up to 90 days), Cloudflare (global network) for hosting, Brevo (France) for email and Stripe for payment. Before a free evaluation, Cloudflare Turnstile checks that you are not a robot: Cloudflare reads technical data from your browser for this, as a separate controller, under its own policy. Brevo adds a small invisible image to our emails that tells it whether and when the email is opened. We do not use this information, but we cannot remove the image. To avoid it, block remote images in your email app. Before doing so we assessed the privacy risks. These providers are bound by contract and protect the data adequately.
Your rights
You can ask to access, correct, delete or transfer your information, and withdraw consent at any time. The “Erase my data” button in the corrector deletes your texts and address at once. Every email, except the one that delivers your pass key, has an unsubscribe link. For anything else, email us. You can also complain to Quebec’s Commission d’accès à l’information or the Office of the Privacy Commissioner of Canada. In the European Union, the competent authority is Lithuania’s State Data Protection Inspectorate (VDAI), and you can also contact your own country’s authority.
These rules follow Quebec’s Law 25 and the Personal Information Protection and Electronic Documents Act (PIPEDA). Our emails follow Canada’s Anti-Spam Legislation (CASL): express consent, sender identification, a mailing address and one-click unsubscribe.
Age
The service is for adults aged 18 or older.
Privacy incidents
If an incident creates a risk of serious injury, we notify the people concerned and the competent authorities.