Effective 20 September 2026
Your email address, so you can sign in. Your practice history — which items you have seen, how you answered, and the scores of your sittings — because that record is the product: it is what the readiness estimate is computed from. If you buy something, we store which exams you own and the identifier of the payment, so we can honour the purchase and a refund.
If you sign in with Google, we store the identifier Google gives us for your account and the email address it reports. We do not receive your Google password, and we ask Google for nothing beyond your name, email address and profile picture.
No password, because sign-in is by emailed link or by your existing Google account. No card details: payment is handled by Stripe and card numbers never reach our servers.
No cross-site trackers, and no profile of you. We do run paid search ads and we do measure whether they lead to a purchase — Advertising below says exactly what that sends and what it does not. We also count page views, with a tool called Umami described below, but it sets no cookie and assigns you no identifier, so one visit cannot be linked to the next, or to your account. It records which pages are opened — inside the signed-in app as well as out here — and which buttons are pressed, so we can see where people get stuck. It does not record your answers, your scores, or anything you type.
Our own cookie is eg_session. It is signed, http-only, and
holds nothing but your account identifier so that you stay signed in for
thirty days. Our analytics sets no cookie at all.
Google’s advertising tag also sets a cookie of its own
(_gcl_au and similar) to remember that you arrived from one
of our ads, so that a later purchase can be counted against the right
one. It is set on this site and read by Google.
We run paid search ads, and this site measures whether they work. Here is exactly what that involves.
What we send. When a purchase completes, we tell Google that one happened, what it was worth, and a reference number for it. We also send a hashed form of your email address — the address put through SHA-256, which turns it into sixty-four characters of hexadecimal. Google compares that against the same transformation of addresses it already holds, which is how a purchase gets matched to an ad click when a browser has blocked the cookie that would otherwise have done it. The hash is computed on our server; your address itself is never placed in the page.
We should be straight about what hashing does and does not do. It is not anonymization: anyone holding both the hash and a guess at the address can confirm the guess. It means we are not handing Google an address it does not already have, and that the address is not sitting in a web page in the clear. It does not mean Google cannot tell who you are.
What we do not send. We will not sell your data. We will not hand it to data brokers, and we will not build or buy a profile of you. We do not send anything you do inside the app — your answers, your scores, your weak objectives — to any advertising network, and we do not use it to target advertising anywhere, here or elsewhere. Nothing about your practice leaves this site.
If you would rather not be measured this way, a tracking-protection setting or content blocker that blocks Google’s tag will stop it, and everything on this site — buying, drilling, your readiness estimate — works exactly the same with it blocked. We do not detect or object to blockers.
We use a small number of services to run ExamGauge. Each sees only what it needs:
Fonts are served from this site rather than from Google, so rendering a page reveals nothing to a third party. One JavaScript library still loads from Cloudflare’s CDN, which reveals your IP address to Cloudflare as any request for a file does. It sets no cookie.
Your account and its practice history stay until you ask us to delete them. Records of a purchase are kept for as long as tax and accounting rules require, which is longer than the account itself.
Email support@examgauge.com and we will delete your account and its practice history, or send you a copy of what we hold, or correct it. We do this for anyone who asks, wherever you live, rather than only where a law compels it.
ExamGauge is for professional certification study and is not intended for anyone under 16. We do not knowingly create accounts for children.
If this page changes materially, the effective date above changes with it and we will say so by email before the change applies to you.
ExamGauge is operated by Smart Components, Inc. d/b/a ExamGauge, 21 Constitution Way, South River, NJ 08882, USA. Card payments are processed by Stripe, which shows EXAMGAUGE on your statement. Questions about this page: support@examgauge.com.