Privacy Policy
Last updated: 17 September 2026
This page explains what ieltsmaterials.uz stores about you, why, and what leaves this site. It covers the website and the practice tests on it.
What we store
| What | Why |
|---|---|
| Your email address | It is your account name and where a password-reset code is sent. |
| Your password, as a hash | Never stored as text. It is put through PBKDF2-HMAC-SHA256 with 120,000 iterations and a random salt, and only the result is kept, so nobody here can read your password — not an administrator either. |
| Profile details you type on your account page | Full name, username, date of birth, gender, phone number and avatar. All of it is optional, all of it is shown only to you, and you can change or empty it at any time. |
| Your practice results | Which tests you opened, the answers you submitted for marking, the score the server calculated and when you submitted it. This is what your progress page and your band history are built from. |
| A device identifier, your IP address and your browser's user-agent | A premium account may be used on three devices. To count them we store a random identifier kept in your browser, plus the address and browser the request came from. A device that has not been used for 45 days releases its place automatically. |
| Your premium status | Whether the account has premium access, until when, who granted it and any note the administrator added while deciding. |
| Password-reset codes | Stored as a hash with an expiry time, not as the digits themselves, and replaced by the next request. |
If you sit a supervised mock exam at the centre, we also store the first name, last name and phone number given at registration, which papers you sat, your scores, and the text of your writing answers, so that a teacher can mark them and you can be given your result.
There is no advertising on this site, there are no advertising or analytics cookies, and none of the data above is sold or shared for marketing.
Signing in with Google
If you choose Continue with Google, Google asks for your permission and then gives us three things: your email address, your name and the address of your profile picture. We check with Google that what the browser handed us is genuine before it signs anybody in.
We never see your Google password, and we do not ask for — and cannot read — your Gmail, Drive, contacts, calendar or any other Google data. If an account with that email address does not exist yet, one is created with a random password that nobody holds, so it can only be entered through Google until you set a password of your own.
What we send to other companies
Your essay is sent to two grammar services when you ask for
grammar feedback. On a Writing test there is a button that
checks your text. When you press it — and only then — up to 18,000
characters of what you wrote are sent to
LanguageTool
(api.languagetool.org) and to
GrammarBot
(www.grammarbot.io), which return the corrections you see.
Your name, email address and account are not sent with it — only the
text. If you would rather these companies never saw an essay, do not
press the button: the test itself, and its marking, work without it.
Everything else that reaches another company:
- Google — only if you use Sign in with Google, as described above.
- Cloudflare — routes traffic for some addresses of this site, and therefore sees the requests passing through, as any network provider does.
- Google Fonts, cdnjs and the image hosts a few test pages use — serve fonts, icons and a small number of pictures. Like any file host, they see the IP address asking for the file.
That is the whole list. The site is built so that a page cannot quietly reach anywhere else: the browser is given an explicit list of permitted destinations with every page, and anything outside it is refused by the browser itself.
Cookies
Only what the site needs to work:
| Cookie | What it does | How long |
|---|---|---|
ielts_session |
Keeps you signed in. | 30 days |
ielts_device_key |
Identifies this browser for the three-device limit. | 1 year |
csrftoken |
Stops another website submitting forms as you. | 1 year |
aslmock_session |
Only during a supervised exam at the centre. | 6 hours |
Your browser also keeps some of your work locally — a draft essay, your answers on a test you have not submitted, and your email address so the page knows who is signed in. That stays on your device and is cleared when you clear your browser data.
How long we keep it
Your account and your results are kept for as long as the account exists, because your progress history is the reason to have one. Ask us to delete the account and we remove it together with its profile, results and device records. A copy may remain in a database backup for a while afterwards before that backup is replaced.
Your choices
- Change or empty your profile details on your account page at any time.
- Change your password from the sign-in page. Doing so ends every session opened with the old one.
- Ask for your account and its data to be deleted.
- Ask what is stored about you, and we will tell you.
Security
Traffic to this site is encrypted. Passwords are stored only as hashes. Test material and answer keys are served only to the account entitled to them, and the server — not your browser — decides. Administrator access is limited to a named list of addresses.
Children
This site is for people preparing for the IELTS exam. We do not knowingly collect data from children under 13. If you believe a child has created an account here, contact us and we will remove it.
Changes
If this policy changes, the date at the top changes with it. A change that affects what leaves the site will be described here rather than made quietly.
Contact
Questions about this policy, a request to see your data, or a request to delete your account: hhabibullayev075@gmail.com.