CivicPass Privacy Policy

1. Introduction & Scope

CivicPass ("CivicPass", "we", "us", or "our") provides an independent digital study platform designed to assist candidates preparing for government naturalization exams, including the United States USCIS Civics Test, the United Kingdom Life in the UK Test, the Canadian Discover Canada Citizenship Test, and the Australian Citizenship: Our Common Bond Examination.

This Privacy Policy explains how we process information when you access our website, study guides, mock exams, and interactive rehearsal tools. By accessing or using CivicPass, you acknowledge the practices described in this document.

2. Information We Explicitly Do Not Collect

Unlike many commercial study platforms that monetize candidate data, CivicPass has engineered our platform with data minimization at its core:

• No User Account Mandate: You do not need to register, provide an email address, or link social accounts to complete practice exams or access our study guides.
• No Sensitive Identity Credentials: We never collect government ID numbers, alien registration numbers, visa documentation, or biometrics.
• No Financial Data: Core practice questions and mock tests on CivicPass are accessible without entering payment details or credit cards.
• No Commercial Ad Retargeting: We do not run third-party behavioral advertising scripts that track your browsing across the web.

3. Information We Collect and How It Is Used

To maintain the stability, performance, and legal security of our platform, we collect limited categories of technical information:

A. Automatically Collected Technical Logs

When your browser requests pages, style sheets, or question data from CivicPass, our hosting servers automatically record standard HTTP server logs. This may include:

• Your Internet Protocol (IP) address (used strictly for network diagnostics, DDoS rate limiting, and coarse geolocation to serve local regional tracks).
• Browser user-agent, operating system version, and device type.
• Referring URLs, requested paths, and request timestamps.
• HTTP status codes and error rates.

These logs are maintained for security analysis and operational health, and are routinely purged on an automated cycle.

B. Voluntary Communications & Feedback

If you choose to submit a message via our Contact Us page (for technical support, editorial question corrections, or feedback), we receive the details you enter:

• Your name (or pseudonym).
• Your email address (to reply to your inquiry).
• The category of inquiry, target exam track, and message body.

This information is used exclusively to answer your request and improve platform accuracy. We do not add your contact email to marketing lists or distribute it to third parties.

4. Browser Local Storage & Cookies

CivicPass utilizes modern browser storage capabilities (such as localStorage and session tokens) to enable a seamless practice experience without requiring a server-side database login:

• Exam Progress & State: When you complete an exam session, your answers and calculated score breakdown are retained directly on your device so you can view your diagnostic results.
• UI Preferences: Test timer pacing and selected country exam tracks are saved locally in your browser.

You can clear this data at any time through your browser settings by clearing site storage for civicpass.org.

5. Legal Bases for Processing (GDPR & UK GDPR)

For individuals residing in the European Economic Area (EEA) and the United Kingdom, CivicPass processes technical data under the following legal bases:

• Legitimate Interests: To deliver dependable educational resources, ensure server stability, prevent abuse or denial-of-service attacks, and fix technical bugs.
• Consent: When you voluntarily submit a message to our support or editorial inbox.

6. Your Privacy Rights (GDPR, UK Data Protection Act & CCPA/CPRA)

Depending on your location, you have statutory rights concerning your personal data:

• Right of Access & Portability: You may request confirmation of whether CivicPass holds any personal information relating to you and obtain a copy.
• Right to Rectification & Erasure: You have the right to request correction or immediate deletion of any correspondence or messages you have submitted to us.
• Right to Object & Restrict: You may object to or restrict processing of your technical information where applicable.
• California Residents (CCPA/CPRA): We do not sell or share personal information. You have the right to request disclosure of data collection categories and request deletion without discrimination.

To exercise any of these rights, please reach out directly through our Contact Page or send an email to privacy@civicpass.org.

7. Data Security and Retention

We implement industry-standard administrative and technical security measures:

• Encryption in Transit: All web traffic is strictly encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Least-Privilege Infrastructure: Internal access to server logs and inquiry communications is restricted to authorized administrative personnel.
• Minimal Retention: Server diagnostic logs are automatically cycled and discarded. Support inquiries are archived or deleted once resolved.

8. Third-Party Service Providers

We partner with vetted, reputable cloud hosting and edge network infrastructure providers (such as cloud platform hosts and content delivery networks) to host CivicPass and ensure high availability across global regions. These providers process data on our behalf solely to deliver edge caching, DDoS protection, and secure web serving in compliance with standard data protection agreements.

9. Children's Online Privacy (COPPA Compliance)

CivicPass is designed for adults and young adults preparing for official national citizenship exams. We do not knowingly collect personal identifiable information from children under the age of 13 (or under 16 in certain jurisdictions). If you believe a child has provided us with personal information, please notify us immediately at privacy@civicpass.org and we will promptly delete it.

10. Updates to This Privacy Policy

We may periodically update this policy to reflect changes in our platform features, statutory requirements, or legal standards. When modifications occur, the updated policy will be posted with an updated "Effective Date" at the top of this page. We encourage you to review this policy periodically.

11. Contact Our Privacy Team

If you have questions, comments, or data privacy requests regarding this Privacy Policy, please contact our data compliance coordinator: