Privacy Policy

Who we are

IELTS Writing Practice is the public operator brand for this independent writing-practice service. We use information to provide accounts and reviews, protect the service, manage usage, understand site performance, and meet legal obligations.

For privacy questions or requests, email [email protected].

Sign-in and browser storage

WorkOS handles sign-in by email verification code or Google OAuth. Google sign-in may provide WorkOS with your verified email address and, where available, your name and profile picture. IELTS Writing Practice uses the verified email for authentication and the available name for account display. It does not copy the profile picture into its application database or expose it through the account UI.

Homepage drafts can contain task type, question text, answer text and an optional exact catalogue binding. Catalogue drafts contain the answer for the selected question. These drafts remain in your browser until cleared and are not automatically uploaded. A session cookie may keep you signed in for up to 30 days.

• WorkOS processes authentication profile data under its privacy policy. IELTS Writing Practice has no local account-profile database and does not store the raw WorkOS user ID in its application database.

AI processing

When you request a review, the question, answer and any permitted task image are sent through our server to third-party AI services. The providers may process or temporarily log inputs and generated output under the terms of their paid services, including limited logging used to detect abuse.

After a successful review, the current release encrypts and saves the question, answer, classification, score, feedback and any permitted task image in authenticated private account history. IELTS Writing Practice may record, persist, log, cache, publish, add to its content catalogue, or reuse user inputs, uploaded images and metadata, provider requests and responses, generated scores, feedback and results, and request identifiers to operate and improve the service.

• One validated PNG, JPEG or WebP image of up to 1,000,000 decoded bytes may be submitted for Academic Task 1.
• Full reviews may appear as anonymous writing samples without account or billing details; free previews do not.

Site measurement and security

Google Analytics 4 loads automatically when configured and may use the _ga cookie to collect page interactions, approximate location, browser, device, operating system, language and traffic source. Google Signals and advertising personalisation are disabled. There is no in-product analytics consent banner or first-party opt-out or withdrawal control.

Cloudflare hosts the service. Its D1 database stores HMAC-pseudonymous account and IP identifiers, encrypted review content, private-image and request references, leases, rate windows, monthly usage counters, billing access records and expiries. An R2 bucket stores application-encrypted Task 1 images. Reviews are retained long term. Active requests and leases expire within minutes; abandoned image reservations after about 10 minutes, idempotency references after 24 hours, and monthly counters after about 400 days.

• Optional telemetry runs only when configured and may include page path, release, timestamp, Core Web Vitals and concise browser errors.
• Optional telemetry is not configured to include drafts, questions, answers or private review content.

Your choices

Depending on your location, processing may rely on providing the service, legitimate interests in security, reliability, analytics and abuse prevention, legal obligations, or consent. Providers may process information internationally under their own safeguards. Where applicable, you may request access, correction, deletion, restriction, objection, portability or consent withdrawal, or complain to a regulator.

Privacy and account-deletion requests can be sent to [email protected] and may require identity verification. Requests remain subject to necessary security, operational and legal retention. We use server-only credentials, application-level encryption for saved reviews, validated requests, same-origin checks, encrypted transport, and signed or sealed cookies, but no system is completely secure. Users without legal capacity need permission from a parent or guardian. Updates will be posted here.