Privacy Policy

Last updated: April 2026

1. What we are

IBGOAT (ibgoat.com) is a free IB exam preparation platform. It provides practice questions, theory notes, AI marking, and study tools for IB students.

2. What data we collect

When you create an account we collect:

• Username — chosen by you, used to identify your account
• Email address — optional; used only for password resets if you provide one
• Password — stored as a secure one-way hash (bcrypt); we cannot read it
• Subject preferences — which IB subjects you study and at which level (HL/SL)
• Study activity — questions answered, scores, session history, and topic progress

We do not collect your real name, payment information, location, IP address logs, advertising identifiers, or any data from third-party sources.

3. How we use your data

• To log you in and keep your session secure
• To show you content relevant to your subjects and level
• To track your progress and show your performance over time
• To send a password reset link if you request one

We do not use your data for advertising, profiling, analytics services, or any commercial purpose beyond running the platform.

4. AI marking

When you submit a written answer for AI marking, your answer text and the question's mark scheme are sent to Anthropic's API for automated feedback. Anthropic processes this according to their privacy policy. Only the answer text itself is sent — no account information or personal identifiers.

5. Email communications

If you provide an email address, we may send a password reset link when requested. We do not send marketing emails, newsletters, or unsolicited messages. Email delivery is handled by Resend, who process your address solely to deliver transactional messages.

6. Data storage and security

• All data is stored on a server located in the EU
• Passwords are hashed with bcrypt — they are never stored in plain text
• All connections are encrypted over HTTPS
• Authentication tokens expire after 365 days

7. Cookies and local storage

IBGOAT does not use tracking cookies or advertising cookies. We use localStorage in your browser to keep you logged in between visits. This data stays on your device and is not transmitted to any third party.

8. Your rights

You have the right to:

• Access — request a copy of all data we hold about you
• Correction — update your username or email in Settings at any time
• Deletion — request permanent deletion of your account and all associated data
• Data portability — request your data in a machine-readable format

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

9. Data retention

We keep your data for as long as your account is active. If you request account deletion, all personal data is permanently removed within 14 days.

10. Children

IBGOAT is intended for IB students aged 16 and above. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has registered, please contact us and we will delete the account promptly.

11. Changes to this policy

If we make significant changes to this policy, we will update the date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.