Privacy Policy

Effective date: August 15, 2026

This Privacy Policy explains how mrreadyprep ("mrreadyprep", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use mrreadyprep.com and its related services (the "Service"). By creating an account or using the Service, you agree to the practices described here.

mrreadyprep is operated from Turkey and is in the process of being incorporated. Once incorporation is complete, this policy will be updated with the legal entity's registered name, address, and tax/Mersis number. Until then, the operator can be reached at the contact address below.

1. Information we collect

1.1 Account information

Email address — used to create your account, verify it, sign you in, and send you service-related emails (e.g. password reset).
Username — a display name you choose or that is generated for you.
Password — stored only as a one-way bcrypt hash; we never store or can see your plaintext password.
Google account identifier — if you choose "Sign in with Google", Google shares a unique account ID and your email/name with us so we can create or match your account. We do not receive your Google password.

1.2 Study and progress data

Your answers, written responses (e.g. emails and discussion posts you write in the Writing section), and scores for practice exercises and mock tests.
Your target scores, exam date, study streak, and vocabulary progress.
Timestamps of when exercises were attempted, used to show your progress over time.

1.3 Subscription and payment status

If you subscribe to premium access, payment is processed by our payment provider, Paddle. We store only your subscription status and reference codes needed to manage your subscription (e.g. to check whether it is active). We never receive or store your card number, CVV, or other full payment card details — those are entered directly with Paddle.

1.4 Technical and local data

Standard technical data sent by your browser to our servers (e.g. IP address, general request metadata) as part of normal web traffic and security/rate-limiting.
Your sign-in session and in-progress (not-yet-submitted) exercise drafts are kept in your browser's local storage, on your own device — not on our servers — so you don't lose unsaved work if you navigate away.

1.5 Analytics cookies (optional)

We use Google Analytics and Microsoft Clarity to understand how the Service is used (e.g. which pages are visited, general usage trends, and — for Clarity — anonymized session recordings and click/scroll heatmaps showing how visitors interact with the page). This sets a cookie in your browser, but only if you click "Accept" on the cookie banner shown on your first visit — it is off by default and you can decline it. Both tools process data on an aggregated basis; we do not use them to identify you individually. You can withdraw consent at any time by clearing your browser's cookies for this site, or via Google's opt-out browser add-on.

2. How we use your information

To create and secure your account, and to let you sign in.
To provide and personalize the Service — showing your practice history, scores, and progress.
To send transactional emails: verifying your email address and password reset links. We do not send marketing emails unless you separately opt in.
To process and manage your subscription, and to determine which content you have access to.
To maintain the security, integrity, and reliability of the Service (e.g. detecting abuse, rate-limiting login attempts).
To improve the Service based on aggregate, non-identifying usage patterns.

3. Who we share data with

We do not sell your personal data. We share data only with service providers who process it on our behalf, strictly to operate the Service:

Provider	Purpose	Data involved
Google (Sign-In)	Optional Google sign-in	Google account ID, email, name
Google Analytics	Understanding aggregate usage of the Service (only if you accept the cookie banner)	Anonymized IP, pages viewed, general device/browser info
Microsoft Clarity	Understanding aggregate usage of the Service via session recordings and heatmaps (only if you accept the cookie banner)	Anonymized click/scroll/mouse-movement events, pages viewed, general device/browser info
Paddle	Payment processing for subscriptions	Payment/billing details you enter directly with Paddle; we receive only subscription status
Resend	Delivering transactional emails (verification, password reset)	Your email address, email content
Render	Application and database hosting	All data described in Section 1, as needed to run the Service
Cloudflare	Hosting and delivering audio files used in listening/speaking exercises	No personal data — static audio content only

We may also disclose information if required by law, to comply with a legal process, or to protect the rights, property, or safety of mrreadyprep, our users, or others.

4. Data retention

We retain your account and study data for as long as your account remains active, so you can track your progress over time. If you ask us to delete your account (see Section 6), we will delete or anonymize your personal data within a reasonable period, except where we are required to retain certain records for legal, tax, or accounting purposes.

5. Your rights

Depending on where you are located, you may have some or all of the following rights regarding your personal data. This includes rights recognized under the EU/UK General Data Protection Regulation ("GDPR") and, for users in Turkey, under Turkey's Law on the Protection of Personal Data No. 6698 ("KVKK"):

The right to know whether your personal data is being processed, and to request information about it.
The right to access a copy of the personal data we hold about you.
The right to request correction of inaccurate or incomplete data.
The right to request deletion or anonymization of your data, subject to legal retention requirements.
The right to object to processing that has legal consequences for you, and, where applicable, to data portability.
The right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 9. We will respond within the timeframe required by applicable law (generally within 30 days).

6. Account deletion

You can request deletion of your account and associated personal data at any time by contacting us. We will process the request as described in Section 4.

7. Data security

We use industry-standard measures to protect your data, including password hashing (bcrypt), encrypted connections (HTTPS) between your browser and our servers, and access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's privacy

mrreadyprep is intended for users preparing for the TOEFL iBT exam, who are generally teenagers and adults. The Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Contact us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

privacy@mrreadyprep.com

10. Changes to this policy

We may update this Privacy Policy from time to time, for example as our legal entity is finalized or as the Service changes. We will update the "Effective date" above when we do. Continued use of the Service after changes take effect means you accept the updated policy.