Privacy notice

Last updated 26 September 2026

DipIMC.Ninja is run by EARL Health Technology Ltd, which is the data controller for the personal data described here. Contact: dojo@exam.ninja.

The short version

• You don't need an account. Without one, your progress stays in your own browser.
• With an account, we store your sign-in details and your revision progress so it follows you between devices.
• The site's owner can see the list of accounts and a summary of each account's scores, to run and support the site. The owner cannot see which options you chose.
• There is no analytics, no advertising and no marketing email, and nothing is sold.
• The site runs on Cloudflare, and its fonts come from Google. Both receive your network (IP) address when you visit, as any website host or font service does.

Without an account

Your progress is kept in your browser's local storage on your own device. That covers attempts, scores, badges, profile, reading list and settings, and we never receive any of it. Clearing your browser's site data deletes it, and you can export it from the Profile page.

The one thing that leaves your browser is a flag, and only if you press "Flag this". See Question flags below.

With an account

Signing in. You can sign in with Google, Apple or Microsoft. Signing in with a link sent by email will be offered when it is switched on.

• Through Google, Apple or Microsoft: we receive your name, your email address and a stable identifier for your account there. Apple will pass a private relay address instead of your real one if you ask it to. A work or university Microsoft account tells us the same three things and nothing about your work.
• By email link, when available: we receive the address you type, and the first and last name you give when you register. There is no password. Each link lasts fifteen minutes and works once. We keep a record of the link, with the network address it was requested from, to stop abuse. Link records more than a day old are deleted the next time anyone asks for a link.
• Limiting repeated attempts: your network address is also used for a moment to limit repeated sign-in attempts. Apart from the email link record, it is not stored.

What we store:

• your name, email address, and the date you joined and were last active;
• which sign-in methods you have used, with each provider's identifier for you;
• your signed-in sessions (when each started, was last used and expires);
• your attempts, scores and badges;
• your reading list;
• your profile: name, optional registration number, weekly targets, theme, your exam sitting and any dates you add to your plan.

Why: to provide the service you asked for by signing in, so your progress follows you between devices. That is the lawful basis: performing the service you asked for.

This browser's copy: while you are signed in, the browser also keeps a copy of your account's progress, so the app keeps working when you are offline. Signing out removes that copy once everything has been sent.

Who can see it: the site's owner, Leigh Rogers, working for EARL Health Technology Ltd, can see:

• the list of accounts, with each account's name, email address, sign-in methods, when it joined and was last active, and how many attempts it has made and its average score;
• a read-only summary of one account's progress: attempts, scores, and how each domain is going.

This is used to run the site, fix problems and answer questions. The summary does not include which options you chose or your answers. If you ask, the owner can delete some or all of your attempts. Nobody else can see your account.

Where it is stored: on Cloudflare's platform. The database (Cloudflare D1) is in Cloudflare's Western Europe region. Requests are handled at the Cloudflare data centre nearest you.

Question flags

If you press "Flag this", we store which question or mission step it is about, the reason you chose, any note you type and when you sent it. If you are signed in, the flag also records your account, so it can be followed up. If you are not signed in, it is anonymous.

If you delete your account, your flags stay, because they are about the question. The account number they carry then points to nothing: your name, email address and everything else about the account are gone.

Your network address is used for a moment to limit how many flags can be sent at once. It is not stored.

Cookies and similar storage

• One cookie: a session cookie (sr_session) keeps you signed in. It lasts up to 90 days, or until you sign out, and is only set if you sign in.
• Local storage: your progress and settings, as described above. It never leaves your browser unless you sign in.

Cloudflare, our host, may also set its own short-lived security cookie if it needs to check for automated traffic. We use no tracking, analytics or advertising cookies. Both of these are needed for the site to do what you ask, so we don't ask for consent to them.

Other organisations involved

• Cloudflare hosts the site and the database. Like any web host it receives your network address and the pages you request. It keeps short-lived technical logs to run and protect the service.
• Google Fonts supplies the site's typefaces. Your browser fetches them from Google's servers, so Google receives your network address and basic browser details when a page loads. We do not use any other Google service on the site.
• Google, Apple or Microsoft are involved only if you sign in with them. Their own privacy notices cover what happens on their side.
• An email delivery service will send the sign-in link once email sign-in is switched on. It will receive your address only to deliver the link.
• PayPal is where the "buy me a coffee" link goes. PayPal's own privacy notice covers anything you do there. As with any PayPal payment, the recipient sees the payment and the name and email address PayPal shows with it. That information is used only to acknowledge the gift, and it is never linked to your revision progress.

Some of these organisations may process data outside the UK. When they do, they rely on the UK's approved safeguards for international transfers.

Our lawful basis for the hosting, fonts, logs and the limits on flags and sign-in attempts is our legitimate interest in running a secure, working site. For your account, it is providing the service you signed up for.

How long we keep it

• Your account and progress: until you delete the account.
• Sessions: until they expire, or until you sign out on that device.
• Email link records: about a day, as above.
• Flags: as long as the question they are about.

Your rights

• Delete your account from the Profile page. This removes your account, profile, every attempt, badge and reading-list item, your sign-in methods and sessions, and any unused sign-in link from the database. Flags stay, as explained above. Progress this browser kept before you signed in stays in its local storage until you clear it or reset it from the Profile page.
• Get a copy of your data with Export on the Profile page. It downloads your attempts, scores, badges, profile and reading list as a file. Your name, email address and sign-in methods are shown on the Profile page.
• Anything else: to correct something, to ask what we hold about you, for any other request, or to complain, email dojo@exam.ninja. You can also complain to the Information Commissioner's Office (ico.org.uk).