Privacy Policy
Last updated: 22 October 2026
1. What we collect
- Signing in with Google: your email address, display name, profile picture and Google account identifier. We never receive your Google password.
- Signing in with email: your email address.
- While using the service: the subjects and levels you say you study, the school tests you add (date and topics), the questions you bookmark, how much of each question you say you got after reading its markscheme (None to All of it), the error reports you submit, and the filters you have applied (stored in your own browser).
- Writing on questions: if you use Write, the pen strokes you draw on a question and its working space are saved to your account so you can come back to them on any device. They are stored as lines (coordinates, colour and pen pressure), not as images, and are visible only to you.
- Sharing your writing: if you press Share, we keep a snapshot of your writing on that question and give you a link. Anyone signed in who opens the link can see the snapshot, add their own corrections or questions on top (only you and they can see those), and save a copy to their account. We record who opened the link so you can see it. Nobody can change your writing. You can stop sharing at any time; copies people have already saved stay with them. When someone adds notes to work you shared, we email you once (their name and their note, with a link) and not again until you have opened it; you can turn these emails off on the Shared work page.
- Access log: which questions were opened, when, from which IP address and with which browser user-agent. This is kept for 45 days and then deleted automatically.
2. How we use it
Your data is used only to run the service: authenticating you, determining whether your account is on the Free or Pro plan, keeping your bookmarks and your writing on questions, showing your learning map from your self-ratings, and handling content error reports. We do not sell, rent or share personal data with third parties for advertising.
The access log described above is used solely to enforce fair-use limits and to detect automated bulk copying of the question bank. It is not used to profile you, and it is not shared.
3. Third parties
We use Google Sign-In for authentication and Resend to deliver sign-in emails. Each receives only the data required for that function. The application carries no advertising trackers and sets no advertising cookies.
4. Cookies
We set exactly one cookie (qacutter.sid), which records that you are signed in.
It is strictly necessary for the service to work, is used for nothing else, and expires after
30 days.
5. Storage and security
Data is held in markedpaper's own database and served over HTTPS. Sign-in links sent by email are stored only as a hash, expire after 15 minutes and can be used once.
6. Your rights
You may request access to, correction of, or deletion of your data at any time by contacting us. When an account is deleted, its bookmarks, subject list, tests and practice sets, self-ratings, writing on questions, shared work and saved copies, and error reports are deleted with it. Copies of your shared work that other people had already saved stay with them, shown as from a deleted account.
7. Contact
Data requests: contact@markedpaper.page.