Privacy Policy

Who we are

IELTS Writing Practice is the public operator brand for this independent writing-practice service. We use information to provide accounts and reviews, protect the service, manage usage, understand site performance, and meet legal obligations.

For privacy questions or requests, email [email protected].

Sign-in and browser storage

WorkOS handles sign-in by email verification code or Google OAuth. IELTS Writing Practice uses the verified email and sealed session needed to authenticate you, but has no local account-profile database and does not store the raw WorkOS user ID. A session cookie may keep you signed in for up to 30 days.

Homepage drafts can contain task type, question text, answer text and an optional exact catalogue binding. Catalogue drafts contain the answer for the selected question. These drafts remain in your browser until cleared and are not automatically uploaded.

Gemini processing

When you request a review, the question, answer and any permitted task image are sent through our server to Google Gemini. Google may process or temporarily log inputs and generated output under the terms for its paid Gemini service, including limited logging used to detect abuse.

IELTS Writing Practice does not persist, log, cache, publish or reuse submitted questions, answers, uploaded images, provider responses, scores, feedback or results. Uploaded images and review results remain in browser memory and disappear on refresh.

• One validated PNG, JPEG or WebP image of up to 1,000,000 decoded bytes may be submitted for Academic Task 1.

Site measurement and security

Google Analytics 4 loads automatically when configured and may use the _ga cookie to collect page interactions, approximate location, browser, device, operating system, language and traffic source. Google Signals and advertising personalisation are disabled. There is no in-product analytics consent banner or first-party opt-out or withdrawal control.

Cloudflare hosts the service. Its D1 database stores HMAC-pseudonymous account and IP-derived identifiers, active request IDs, rate windows, daily usage counters and expiries, but not drafts or review content. Requests and leases expire after about three minutes; rate records become eligible for cleanup after about 10 minutes and daily usage records after about eight days.

• Optional telemetry runs only when configured and may include page path, release, timestamp, Core Web Vitals and concise browser errors.
• Optional telemetry is not configured to include drafts, questions, answers or private review content.

Your choices

Depending on your location, processing may rely on providing the service, legitimate interests in security, reliability, analytics and abuse prevention, legal obligations, or consent. Providers may process information internationally under their own safeguards. Where applicable, you may request access, correction, deletion, restriction, objection, portability or consent withdrawal, or complain to a regulator.

Requests may require identity verification and remain subject to necessary security, operational and legal retention. We use server-only credentials, validated requests, same-origin checks, encrypted transport, and signed or sealed cookies, but no system is completely secure. Users without legal capacity need permission from a parent or guardian. Updates will be posted here.