Privacy Policy

Who we are

ieltswrites (ieltswrites.com) is an independent IELTS Writing practice website. We are responsible for the personal data described here. Contact us about privacy at support@ieltswrites.com.

What we collect

• Account details: your email address, a display name taken from your email, a securely hashed password if you set one, and your basic Google profile (name, email, picture) if you sign in with Google.
• Sign-in and security data: session records with IP address and browser user agent, and sign-in, sign-up and request logs used to keep the service secure. When you sign up we also record the IP address, browser user agent, browser language, referring page and an approximate location (country, region and city) derived from your IP address.
• Practice content: the questions you choose or type in, your essays and drafts, timings, and the AI scoring reports produced for them.
• Writing process: while you type in the exam simulator's answer box we record each change to the text with the exam-clock time (what was typed or deleted, where, and when), whether text was pasted, and when you switched away from the page. We record nothing outside the answer box. It is uploaded with your essay when you finish, and is used only for the writing-process analysis in your own score report and your progress page; it never appears on shared report links. You can turn recording off on the exam setup screen before you start.
• Credits and orders: your credit balance and history, any scoring pass and its dates, and for each purchase the package, amount, currency, status and Stripe reference. We never see or store your card details.
• Study goal: if you enter them, your exam date and target band, used only to show your study plan on your own score reports.
• Analytics: if you allow it (or by default outside the EEA, UK and Switzerland), Google Analytics records pages viewed and actions such as starting a test or buying credits, using cookies.
• Visit statistics: Vercel Web Analytics counts page views without cookies, using an anonymous identifier that is discarded within 24 hours.
• Product usage: when you are signed in we log how you use your score reports and credits (for example how long a report stays open, how far you scroll, which tabs and comments you open, and when you see the credit prompt or start a purchase), together with your account ID, to improve the scoring reports.
• Feedback: if you answer one of our short questions (whether a report was useful, what went wrong with a scoring job, or why you didn't buy), we keep your answer and anything you type, together with your account ID and the related scoring job. We also note if you close the question, so we don't ask again. Your essay is not attached.
• On your device: preferences, unsent drafts, your cookie choice and an invite code are kept in your browser's local storage, and a first-party cookie notes the site language and the site or campaign that first brought you here, which we read only if you sign up. Another first-party cookie notes that you have opened the exam, so the home address takes you straight back to it.

How we use it

We do not sell your personal data and we do not show ads.

• To run the service: sign you in, save your essays, score them with AI, keep your credit balance and deliver what you buy (contract).
• To send service emails: sign-in codes, email verification and password reset links (contract).
• To send occasional practice reminders, only to verified addresses; every reminder has a one-click unsubscribe link (legitimate interest).
• To prevent abuse and fraud, for example limits on free scores and scoring and stopping the free scoring period from being claimed again with a new account, and to fix errors (legitimate interest).
• To keep a record of closed accounts for abuse prevention, payment disputes and business records (legitimate interest).
• To understand how the site is used and improve it, through Google Analytics (consent in the EEA, UK and Switzerland; legitimate interest elsewhere).
• To review samples of essays and reports so we can improve scoring quality, for essays submitted on or after 1 November 2026 (legitimate interest).
• To improve the service using the feedback you choose to give (legitimate interest).
• To meet legal, tax and accounting obligations (legal obligation).

Who processes it for us

If you create a share link for a report, anyone with that link can see that essay and its report (not your email). You can turn the link off at any time.

These providers may process data outside your country, including in the United States and China. Where the law requires it, transfers rely on the providers' standard contractual clauses or equivalent safeguards.

• Vercel — hosts the website and its servers, and counts anonymous page views (Vercel Web Analytics).
• Neon — hosts our database.
• DeepSeek — the AI model that scores essays, rewrites them and analyses the writing process. We send the question, your essay text, the scoring report and, for the process analysis, a summary of your writing process (timings, pauses, words you hesitated on and sentences you rewrote or deleted) — never the raw keystroke record, your email or your name. DeepSeek is based in China.
• Anthropic — we send a sample of essays, with the question and the scoring report, to its Claude AI assistant to review and improve scoring quality. We never send your email, your name or your writing-process record. Anthropic does not use this data to train its models and generally deletes it within 30 days. Anthropic is based in the United States.
• Stripe — processes payments. Purchases use Stripe Managed Payments, so Stripe acts as the seller of record, handles sales tax or VAT and sends your receipt under its own privacy policy.
• Resend — delivers our emails.
• Google — Google Analytics, and Google sign-in if you choose it.
• Cloudflare — runs our domain's DNS and forwards email sent to our support address.
• Telegram — we receive internal notifications about new sign-ups, account deletions and payments, which include the account email.

How long we keep it

• Essays, drafts, writing-process records, reports, share links, credits and sessions: until you delete your account.
• Server and request logs: 90 days.
• Feedback answers: until you delete your account, when they are removed from our live database.
• After you delete your account, your essays, drafts, writing-process records, reports, share links, credits and sessions are removed from our live database immediately. Copies in our database provider's backups expire within their backup retention window.
• Closed-account record, kept after you delete your account: your account ID and email address, whether it was verified, how you signed up, the IP address, approximate location, browser and device you signed up with, your browser language and referring page, when and from which IP address you were last active, how many paid orders you had, your credit balance and number of AI scores at deletion, when you deleted the account and the reason you chose, if any. We keep this record, together with the dates and amounts of your orders and scoring jobs and a keyed hash of your email address, to prevent repeat claims of free scores and other abuse, to handle payment disputes and refunds, and to keep accurate business records.
• Stripe keeps payment and tax records for as long as it is legally required to.

Your choices and rights

• Delete your account at any time from the Account page. This permanently removes your essays, reports, share links and credits; we keep the closed-account record described above.
• Ask us for a copy of your data, or to correct it, by emailing us from your login email.
• Change your analytics choice by clearing this site's data in your browser, which shows the cookie banner again, or block analytics with your browser settings.
• Unsubscribe from practice reminders using the link in any reminder email.
• Depending on where you live (for example under the GDPR or UK GDPR), you may also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority.

Children

ieltswrites is not intended for children under 13. In the EEA and UK, users under 16 need permission from a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

Security

Data is sent over HTTPS, passwords are stored only as hashes, and access to production systems is restricted. No system is perfectly secure, so please use a unique password.

Changes

If we change this policy we will update the date on this page. For significant changes we will also tell signed-in users on the site or by email.