Last updated: September 7, 2026
Who operates this service
Exam Onion is operated by an individual in Ontario, Canada. For privacy questions or requests, contact the site operator at newyearnewlife001@gmail.com.
Information used by the service
- Account information: your sign-in provider's account identifier, name, email, profile picture when supplied, chosen display name, and sign-in activity. Your provider handles its own password authentication.
- Learning information: selected exams, practice answers and results, session history, progress, saved topics, and question feedback.
- Billing information: credit balances and credit transactions, subscription status, payment identifiers, purchase amounts, and related receipt or billing contact information. Payment details are entered through Stripe or PayPal; this application does not store full card numbers or card security codes.
- Support and technical information: messages and bug reports you submit, delivery records for service emails, request and error logs, and security events. Network requests include technical information such as IP addresses; application rate limits use a hashed IP identifier.
Why this information is used
We use service information to authenticate accounts, save learning progress, deliver practice sessions, process payments and credits, send service messages, answer support requests, and detect errors or misuse. Service emails may include welcome messages, purchase receipts, and monthly-credit notifications.
Service providers and external requests
Hosting and database services process information needed to run the site. The application uses Vercel hosting, Supabase/Postgres storage, and an email delivery provider. Sign-in providers receive information when you use their login services. Stripe or PayPal processes payment information for the method you choose.
The site also loads Google-hosted fonts and, where enabled, Google sign-in resources. Loading these resources sends your browser's network information to the provider. Third-party services process information under their own terms and privacy notices, including Google, Stripe, and PayPal.
Cookies and browser storage
A session cookie keeps you signed in and is configured to expire after seven days. Browser storage saves account-related state and preferences such as theme and selected exam. Clearing cookies or site storage can sign you out or reset local preferences; it does not delete records already saved to your account.
You can manage cookies and site storage in your browser. Blocking essential storage may prevent sign-in or other account features from working.
Retention and your requests
Account, learning, and billing records are retained to provide account history and operate the service. This notice does not specify a fixed automatic deletion schedule. Transaction, security, or dispute records may need to be retained to meet applicable obligations.
To request access, correction, or deletion, email newyearnewlife001@gmail.com. Requests are handled manually and may require identity verification. Applicable legal rights and response deadlines are not limited by this notice. Removing local browser data or signing out does not close your account. To stop recurring billing, also follow the cancellation instructions.
Canadian privacy rights and consent
The individual site operator is the contact responsible for privacy questions and complaints. You may request information about how your data is used or disclosed, ask to access or correct it, and raise a concern at newyearnewlife001@gmail.com. Where PIPEDA applies, access requests generally require a response within 30 days, subject to permitted extensions and exceptions. This is not a promise that every deletion request is completed within 30 days.
You may also ask to withdraw consent, subject to legal or contractual restrictions. If information is necessary to authenticate your account or provide a feature, withdrawing consent may prevent continued use of that feature. You can raise unresolved concerns with the Office of the Privacy Commissioner of Canada.
Service providers may process information outside Canada, where it may be subject to local laws and lawful government access. Contact us for questions about the providers handling your information.
Security
The application uses controls such as signed sessions, restricted account access, and request rate limits. No online service can guarantee absolute security. Please keep your sign-in provider account secure and avoid putting sensitive information into feedback or bug reports.
Changes and questions
Updates to this notice will appear here with a revised date. Contact newyearnewlife001@gmail.com with questions about a practice or a request, including concerns involving a minor's information.