Privacy Policy
This Privacy Policy explains how EKSTRUH LTD (“we”, “us”) collects, uses, shares and protects personal information when you use CPSTesting.com (the “Site”). The Site is operated by EKSTRUH LTD, a company registered in England and Wales (company number 16905290). Registered office: Victoria Grove, Bolton, BL1 4JW, United Kingdom. We are the data controller for the personal information described here.
We wrote this policy to meet the UK General Data Protection Regulation and Data Protection Act 2018 (“UK GDPR”), the Privacy and Electronic Communications Regulations (PECR), and, for visitors in those places, the EU GDPR, Canada's privacy laws (PIPEDA and Quebec's Law 25) and US state privacy laws such as California's.
- Summary
- Information we collect
- How we use it and our legal bases
- Google Analytics
- Advertising (Google AdSense)
- Affiliate links
- Google Search Console
- Cookies and your choices
- Who we share information with
- International transfers
- How long we keep it
- Security
- Your rights
- Extra information by region
- Children
- Changes
- Contact us
1. Summary
- You can use every test without an account. Your scores, best results and history are stored only in your own browser, and we never receive them.
- We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't track you.
- With your consent, we use Google Analytics to measure visits and Google AdSense to show personalised ads. Without consent, these cookies are not set and any ads are non-personalised.
- We use affiliate links. If you click one, the retailer or affiliate network may set its own cookies on its website.
- We do not sell your personal information for money. We do not ask for, and do not want, sensitive information.
2. Information we collect
Stored only on your device
The Site uses your browser's local storage to keep your test history, personal bests and cookie choices. This data stays on your device, is never sent to us, and can be deleted with “Clear history” or by clearing your browser's site data.
Collected automatically
- Server logs: our hosting provider records technical data such as IP address, browser type, the page requested, the referring page and the date and time. We use it to keep the Site secure and working.
- Cookie-free visit statistics: see section 4.
- Analytics data (only with consent): see section 4.
- Advertising data: see section 5.
Information you give us
If you email us, we receive your email address, your name if you include it, and the content of your message.
3. How we use information and our legal bases
| Purpose | Information | Legal basis (UK and EU GDPR) |
|---|---|---|
| Running the Site securely and fixing faults | Server logs | Legitimate interests |
| Counting visits without cookies (Cloudflare Web Analytics) | Page views, referrer, country, device type | Legitimate interests |
| Measuring and improving the Site (Google Analytics) | Analytics data | Consent |
| Personalised advertising | Advertising cookies and identifiers | Consent |
| Non-personalised advertising, fraud prevention and ad measurement | Limited advertising data | Legitimate interests (and consent where the law requires it for cookies) |
| Crediting affiliate referrals | Aggregate click counts | Legitimate interests |
| Replying to your messages and handling requests | Your email and message | Legitimate interests; legal obligation for rights requests |
| Meeting legal duties and enforcing our Terms | As needed | Legal obligation; legitimate interests |
Where we rely on legitimate interests, our interest is to run a free, safe and reliable website funded by advertising. We have balanced that against your rights, and you can object at any time (see section 13).
4. Analytics
Cloudflare Web Analytics (no cookies)
We use Cloudflare Web Analytics, provided by Cloudflare, Inc., to count visits. It does not use cookies or local storage, does not create a profile of you and does not track you across websites. It records anonymous page-view data such as the page visited, the referring site, your country and your device and browser type. We see only totals. Because no information is stored on your device, it runs without asking for consent. See Cloudflare's privacy policy.
Google Analytics
With your consent, we use Google Analytics 4, provided by Google Ireland Limited (for UK and European users) and Google LLC. It collects information such as the pages you visit, how long you stay, your device and browser, the site that referred you, and your approximate location (city or region), using cookies such as _ga and _ga_*.
- Google Analytics 4 does not log or store full IP addresses.
- We have turned off Google Signals (cross-device tracking linked to Google accounts) and Analytics advertising features.
- We see only aggregated reports and cannot identify you from them.
- If you decline, Analytics cookies are not set. Google Consent Mode may still send cookieless signals (for example, that a page was viewed) that do not identify you.
More information: How Google uses information from sites that use its services.
5. Advertising (Google AdSense)
We use Google AdSense to show ads. Google and its advertising partners may use cookies, device identifiers and similar technologies to serve ads, limit repeats, prevent fraud and measure performance.
- Personalised ads (based on your interests and activity on other sites) are shown only if you give advertising consent.
- Non-personalised ads are based on context, such as the page you are viewing and your general location. They may still use cookies for frequency capping, fraud prevention and aggregated reporting.
- Visitors in the UK, the European Economic Area and Switzerland see a consent message from Google's certified consent platform, which uses the IAB Transparency and Consent Framework.
- You can manage ad personalisation in Google's My Ad Center, or with Your Online Choices (UK/EU), AdChoices (Canada) and aboutads.info (US).
See Google's advertising policies for details.
6. Affiliate links
Some pages contain affiliate links, marked “affiliate link”. If you click one and buy something, we may earn a commission. When you click, you leave our Site, and the retailer or affiliate network may set cookies on its own website to credit the sale to us. That is governed by their privacy policy. We count clicks on our links, but we receive only aggregate reports from partners, never your name or payment details. See our Affiliate Disclosure.
7. Google Search Console
We use Google Search Console to see how the Site appears in Google Search. It gives us aggregated data such as search queries, impressions and clicks. It sets no cookies on the Site and tells us nothing about individual visitors.
8. Cookies and your choices
We ask for your choice about analytics and advertising on your first visit. “Reject all” is as easy as “Accept all”. You can change or withdraw consent at any time with the Cookie settings link at the bottom of every page. Withdrawing consent does not affect processing that already happened. Your choice is saved in your browser for 12 months. You can also block or delete cookies in your browser. Details of each cookie are in our Cookie Policy.
9. Who we share information with
We share personal information only with providers that help us run the Site, under contracts that require them to protect it:
- our web hosting provider (server logs);
- Google (AdSense, Search Console and Analytics);
- Cloudflare (cookie-free visit statistics);
- affiliate networks and retailers, when you click an affiliate link;
- our email provider, when you contact us.
We may also disclose information if the law requires it, or to protect our rights, the Site or other people. If our business is sold or reorganised, information may pass to the new owner under this policy.
10. International transfers
Our providers may process information outside the UK, including in the European Union and the United States. Where information leaves the UK or the European Economic Area, we rely on adequacy decisions (such as the UK–US Data Bridge) or approved safeguards (such as the International Data Transfer Agreement or Standard Contractual Clauses) offered by those providers. Information held abroad may be accessible to authorities in those countries under their laws.
11. How long we keep it
- Analytics data: 14 months, then deleted automatically by Google Analytics.
- Server logs: usually no longer than 90 days, unless needed to investigate a security incident.
- Emails: up to 24 months after the conversation ends.
- Data in your browser: until you delete it.
12. Security
The Site uses encrypted HTTPS, and access to our systems is limited and protected with strong passwords and two-step sign-in. No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will notify you and the relevant regulator where the law requires it.
13. Your rights
Under UK and EU GDPR you have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have information deleted;
- restrict or object to processing, including processing based on legitimate interests;
- receive your information in a portable format;
- withdraw consent at any time.
To use any of these rights, email [email protected]. We reply within one month and may ask you to confirm your identity. Because we never receive your test results and the Site has no visitor accounts, we usually hold little or no information that can be linked to you.
You can complain to the UK Information Commissioner's Office (ICO), or to the data protection authority where you live. We would appreciate the chance to resolve your concern first.
14. Extra information by region
European Union
The rights in section 13 apply to you under the EU GDPR. You can complain to your local data protection authority.
Canada
You have rights to access and correct your information and to withdraw consent under PIPEDA and, in Quebec, Law 25. The person in charge of protecting personal information is our data protection contact below. You can complain to the Office of the Privacy Commissioner of Canada or Quebec's Commission d'accès à l'information.
United States
Depending on your state, you may have the right to know, access, correct and delete personal information, and to opt out of “targeted advertising” or the “sale” or “sharing” of personal information. We do not sell personal information for money. Personalised advertising is used only if you allow it, and you can turn it off at any time with Cookie settings or your browser's Global Privacy Control signal. To make a request, email [email protected]. We will not treat you differently for using your rights.
15. Children
The Site is suitable for a general audience but is not directed at children under 13. We do not knowingly collect personal information from children. Visitors under 16 should ask a parent or guardian before accepting analytics or advertising cookies. If you believe a child has sent us personal information, contact us and we will delete it.
16. Changes to this policy
We may update this policy as the Site or the law changes, and will change the “Last updated” date above. If we make significant changes, we will show a notice on the Site and ask for consent again where required.
17. Contact us
For any privacy question or request, contact our data protection contact:
Data Protection, EKSTRUH LTDCompany number 16905290, registered in England and Wales
Victoria Grove, Bolton, BL1 4JW, United Kingdom
Email: [email protected]