Privacy Policy

IELTS Writing Simulator is an independent IELTS writing practice tool operated by Harol Antibar. For anything in this policy, contact us via the Support page.

The short version: your essays are private by default. They are processed only to generate your feedback, never published, never sold, and never used to train AI models without your explicit, revocable consent.

• Account data — your name, email address, and a hashed password (we store a bcrypt hash; we cannot read your password).
• Your writing — the essays you submit, the evaluations, improvement tips, and practice exercises generated from them, and your exercise attempts.
• Billing data — handled by Stripe (see Payments below). We store only your Stripe customer and subscription identifiers and the subscription status — card details never touch our servers.
• Technical data — a session cookie so you stay logged in, and short-lived rate-limit counters that protect the service from abuse.

When you submit an essay, its text (together with the practice task it answers) is transmitted to Google's Gemini API, which performs the automated language analysis our evaluation is built on. Google processes this data as our service provider under its API terms. The band score itself is computed on our servers from that analysis.

Your essays are never published, never shared with other users, and never sold. We do not use your writing to train AI models, and we will not do so in the future without asking for your explicit consent first — consent you could revoke at any time.

We use exactly one cookie: an essential, httpOnly session cookie that keeps you logged in. It is not used for tracking or advertising, and there are no third-party advertising cookies anywhere on the site.

For usage statistics we use Umami, a privacy-preserving analytics tool. It sets no cookies, stores no personal identifiers, and does not track you across other sites — we see anonymous, aggregate numbers (pages visited, buttons clicked), never who you are.

Subscriptions are processed by Stripe on Stripe-hosted pages. Your card number is entered on Stripe's site and never reaches our servers; what we keep is the subscription state (active, canceled, and the billing-period end date) needed to grant premium access.

We share data only with the providers required to run the service: Google (Gemini API — essay analysis), Stripe (payments), Umami (anonymous, aggregate analytics), and our hosting infrastructure providers. Each receives only what its function needs. These providers may process data outside your country of residence (for example in the United States); we rely on their standard contractual safeguards for those transfers.

Your account data, essays, and evaluations are kept while your account is active so your history and progress remain available to you. Billing records are retained as required for accounting. If you delete your account, your personal data is removed; anonymized, aggregate statistics may be retained.

You can request access to, correction of, a copy of, or deletion of your personal data at any time via the Support page, writing from your account address so we can verify the request. We respond to every request; in-app self-service controls (export and delete) are on our roadmap. Log out of any device by ending its session — sessions are revocable server-side, immediately.

Passwords are stored as bcrypt hashes, sessions live server-side and can be revoked instantly, traffic is encrypted in transit, and expensive endpoints are rate-limited. No system is perfectly secure, but the platform is built so that the sensitive paths — your password, your card, your essays — have the smallest possible exposure.

The service is not directed at children under 16. If you believe a child under 16 has created an account, contact us and we will remove it.

If this policy changes in substance, we will update this page and the date at the top. Questions? See the Support page.