Who we are

ieltswrites (ieltswrites.com) is an independent IELTS Writing practice website. We are responsible for the personal data described here. Contact us about privacy at support@ieltswrites.com.

What we collect

• Account details: your email address, a display name taken from your email, a securely hashed password if you set one, and your basic Google profile (name, email, picture) if you sign in with Google.
• Sign-in and security data: session records with IP address and browser user agent, and sign-in, sign-up and request logs used to keep the service secure.
• Practice content: the questions you choose or type in, your essays and drafts, timings, and the AI scoring reports produced for them.
• Credits and orders: your credit balance and history, and for each purchase the package, amount, currency, status and Stripe reference. We never see or store your card details.
• Analytics: if you allow it (or by default outside the EEA, UK and Switzerland), Google Analytics records pages viewed and actions such as starting a test or buying credits, using cookies.
• On your device: preferences, unsent drafts, your cookie choice and an invite code are kept in your browser's local storage.

How we use it

We do not sell your personal data and we do not show ads.

• To run the service: sign you in, save your essays, score them with AI, keep your credit balance and deliver what you buy (contract).
• To send service emails: sign-in codes, email verification and password reset links (contract).
• To send occasional practice reminders, only to verified addresses; every reminder has a one-click unsubscribe link (legitimate interest).
• To prevent abuse and fraud, for example daily limits on free credits and scoring, and to fix errors (legitimate interest).
• To understand how the site is used and improve it, through Google Analytics (consent in the EEA, UK and Switzerland; legitimate interest elsewhere).
• To meet legal, tax and accounting obligations (legal obligation).

Who processes it for us

If you create a share link for a report, anyone with that link can see that essay and its report (not your email). You can turn the link off at any time.

These providers may process data outside your country, including in the United States and China. Where the law requires it, transfers rely on the providers' standard contractual clauses or equivalent safeguards.

• Vercel — hosts the website and its servers.
• Neon — hosts our database.
• DeepSeek — the AI model that scores essays. We send the question and your essay text only, never your email or name. DeepSeek is based in China.
• Stripe — processes payments. Purchases use Stripe Managed Payments, so Stripe acts as the seller of record, handles sales tax or VAT and sends your receipt under its own privacy policy.
• Resend — delivers our emails.
• Google — Google Analytics, and Google sign-in if you choose it.
• Cloudflare — runs our domain's DNS and forwards email sent to our support address.
• Telegram — we receive internal notifications about new sign-ups and payments, which include the account email.

How long we keep it

• Account data, essays, reports and credit history: until you delete your account.
• Server and request logs: 90 days.
• After you delete your account, it is removed from our live database immediately. Copies in our database provider's backups expire within their backup retention window.
• Stripe keeps payment and tax records for as long as it is legally required to.

Your choices and rights

• Delete your account at any time from the Account page. This permanently removes your account, essays, reports, share links and credit history.
• Ask us for a copy of your data, or to correct it, by emailing us from your login email.
• Change your analytics choice by clearing this site's data in your browser, which shows the cookie banner again, or block analytics with your browser settings.
• Unsubscribe from practice reminders using the link in any reminder email.
• Depending on where you live (for example under the GDPR or UK GDPR), you may also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority.

Children

ieltswrites is not intended for children under 13. In the EEA and UK, users under 16 need permission from a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

Security

Data is sent over HTTPS, passwords are stored only as hashes, and access to production systems is restricted. No system is perfectly secure, so please use a unique password.

Changes

If we change this policy we will update the date on this page. For significant changes we will also tell signed-in users on the site or by email.