Privacy Policy

Last updated: 1 October 2026

CoatMentor (“we”, “us”) provides independent online exam-preparation practice for coating inspectors. This policy explains what personal data we collect, why, who processes it, and the choices you have. Questions: [email protected].

1. What we collect and why

Data	Why	When
Your name, email address and Google account identifier	To create your account, sign you in, and unlock the tracks you have purchased	When you sign in with Google
When you last used the members area (date and time)	To see whether members come back to practise, and to help with support questions	When you sign in or open the members area; kept with your account
Purchase details (email, order ID, which product)	To grant access to the product you bought and provide support	When you buy through our payment provider
Your confirmation that your access starts now (when you gave it, the wording version and the order it concerns)	Evidence that you asked for immediate access and acknowledged losing the right of withdrawal	When you start your access to a newly bought track; kept with your account
An unfinished mock exam (your answers, including written answers you typed, and its timer)	So you can continue a long exam later, on any device you sign in on	While a mock is unfinished; deleted when you finish or discard it, or when your access to that track ends
Written practice answers you choose to submit for feedback (plus your email)	So a CoatMentor expert can grade them and email you feedback	Only when you click “Send my answers for expert feedback”
The email address you leave in the free sampler or launch-notification form, with your answer to “When is your exam?” if you gave one on the same results screen	To send you the sampler recap, let you know when the product opens, and time a reminder before your exam month	Only when you submit the signup form — stored in our database and also relayed to our inbox by Web3Forms
Your practice progress: recent results, which questions you have seen, per-domain statistics and the questions you got wrong	So your progress follows you when you sign in on another device	While you are signed in, each time you finish a practice set or mock
Aggregate, cookieless visit counts	To understand traffic and improve the site	On each page view — no personal data, no cross-site tracking
How you first reached the site in this visit (an ad campaign tag, the referring website such as “google.com”, or “direct”)	To learn which channels lead to purchases	Passed to our payment provider when you open checkout and stored with the order — never combined with your name or email in our records

We never receive or store your full payment-card details — those are handled entirely by our payment provider (see below).

2. Data stored on your device

Your practice history, which questions you have seen, your per-domain statistics, your cookie acknowledgement, and a working copy of any in-progress exam are stored in your browser (localStorage) on your device. How you first reached the site in the current visit is kept in session storage, which your browser clears when you close the tab. If you have purchased a track, a small offline practice pack (a sample of that track's questions, so you can practise without a connection) is also stored on your device (IndexedDB); it is removed when you sign out. Your practice progress stays in your browser after you sign out, so it is there when you come back, and you can clear it at any time through your browser settings. If someone else signs in on the same browser, they do not see your progress.

3. Cookies

We use a single strictly necessary cookie:

cm_session — an HttpOnly cookie that keeps you signed in after you log in with Google. It is required for the members area to work.

We do not use advertising, marketing or third-party tracking cookies. Our analytics are cookieless. Because the only cookie we set is essential, no consent is required to use it — the notice banner is purely informational.

4. Who processes your data

We use a small number of trusted providers to run the service:

Google Sign-In — authentication (policy).
Lemon Squeezy — our payment provider / merchant of record (policy).
Cloudflare — hosting and secure storage of your account, entitlement and in-progress exam (policy).
Our own analytics — we count visits ourselves, on our own infrastructure (Cloudflare), without cookies: your IP address and browser type are combined with a secret value that changes daily to compute an anonymous identifier, and the IP address itself is never stored. The identifier cannot be linked across days. When you finish or leave a practice set, or finish a mock exam, we also add your answers to anonymous per-question counts (how often each question is answered, answered correctly, and which option is picked), so we can find and fix unclear or wrong questions. These counts carry no name, email, account or visit identifier, and cannot be traced back to you.
Web3Forms — relays the free-sampler email signup, the launch-notification signup, and any written answers you choose to submit for feedback (policy).
AI marking providers (Groq, Google Gemini, Cloudflare Workers AI, OpenRouter) — AI marking of FROSIO written answers, in the paid FROSIO written track only. When you submit a written answer for marking, the answer text you typed is sent to one of these providers to compare it against the model answer and pre-fill your marking checklist. We try them in order — Groq first, then Google Gemini, then Cloudflare Workers AI, then OpenRouter — moving to the next only if one is unavailable, so a given answer is sent to whichever provider handles it. Through OpenRouter we only allow providers that neither store your answer nor train on it. Only the answer text is sent: never your name, email or account identifier. They process it under Groq’s privacy policy, Cloudflare’s privacy policy, Google’s Gemini API terms and OpenRouter’s privacy policy. The free sampler on the home page never uses AI marking — it is marked in your own browser. If no provider is available, you mark your answers yourself instead.

Your data may be processed on these providers’ infrastructure, which may be located outside your country.

5. How long we keep it

Account & purchase records: kept while your account exists, so we can keep providing access to what you bought.
Practice progress: kept while your account exists and deleted with it.
Unfinished mock exam: deleted as soon as you finish or discard it, and at the latest when your access to that track ends.
Anonymous per-question counts: kept, since they contain nothing that identifies you.
On-device data: remains in your browser until you clear it.

6. Your rights

You can ask us to access, correct or delete your personal data. To request deletion of your account, email [email protected] from the address you signed in with.

Deleting your account removes your access to any tracks you have purchased. If you only want to clear on-device progress, you can do that yourself in your browser without contacting us.

7. Children

CoatMentor is a professional certification-preparation tool and is not directed at children under 16.

8. Changes to this policy

If we change this policy we will update the date at the top of this page. Continued use of the service after a change means you accept the updated policy.

CoatMentor is independent and not affiliated with AMPP, NACE International, or FROSIO. All trademarks are the property of their respective owners.