Competition Privacy Notice
1. Who we are
Exam Center is operated by Exam Center LLC, a Virginia limited liability company (United States). This notice explains what we collect for online competitions, why, and what your choices are. It complements the general Exam Center privacy policy.
2. Children and parental consent (COPPA)
Students are usually under 13. We therefore do not let children create competition accounts themselves. A registration is made by a parent or legal guardian, who creates a parent account and gives consent, or by the student's school acting on the parents' behalf. Paying the entry fee by card is how a parent's consent is confirmed; for free competitions the parent's acceptance of this notice at registration is the consent. A parent can review and delete the child's data at any time from the parent panel or by contacting us.
3. What we collect
- Parent account: name, e-mail, mobile phone, country, password (stored only as a hash).
- Child profile: first and last name, birth date, grade, the student’s e-mail address and password (stored as a hash), nickname.
- School registrations: the student's existing Exam Center account name and the grade and nickname the school enters.
- Exam data: the questions served, answers and the times they were saved, the start and end times, the device and browser description, IP address, and integrity events (full-screen exits, tab switches, pasting, developer tools, second sessions). If a stage requires a camera, camera use is checked before the stage; camera images are recorded only where the competition page says so, and are kept for review only.
- Results: scores, ranks, outcomes, appeals and decisions, certificate codes.
- Payments: we keep the amount, currency, status and the payment provider's reference. Card numbers are entered on Stripe's pages and never reach us.
- Prize winners: document type, last four digits of the document number, the name and birth date on the document, delivery address and phone. We do not store images of documents.
4. What we use it for
Running the competition (registration, exam day, scoring, advancement, results, appeals, certificates, prizes), preventing duplicate registrations and cheating, sending the e-mails the competition needs (confirmation, next stage, results, appeals, prizes), and meeting legal and accounting obligations. We do not sell personal data and do not show advertising.
5. What others see
Public result lists and certificate verification show the nickname only, together with the grade band, country sitting, score and rank. A parent can hide the nickname from public lists. The student's real name appears only to the parent or school that made the registration and to the organizer's staff.
6. Who else processes data
Stripe (payments), our e-mail provider (competition e-mails) and our hosting provider. Each processes data only on our instructions.
7. How long we keep it
Registration, exam and result data are kept for as long as the competition and its appeals need them and then for the period required for accounting and for verifying certificates. Integrity event logs and any camera images are deleted at the latest 12 months after the competition ends unless needed for an open dispute. Prize identity details are deleted after delivery. A parent may ask for earlier deletion; data needed for accounting or to keep a certificate verifiable is kept in minimized form.
8. Your rights
Parents and schools can see, correct and delete the data they entered from their panel; nicknames can be changed until registration closes. You can ask us for a copy of the data we hold about your child, ask us to correct it, or withdraw consent and delete the account. Residents of the EU/UK and Türkiye have the additional rights their law gives them (KVKK, GDPR); we honour requests from any parent regardless of location.
9. Security
Passwords and PINs are stored as hashes, sessions are server-side and revocable, answer keys never leave the server, all traffic is encrypted, and access to competition data is limited to organizer roles that are logged.
10. Changes and contact
If this notice changes in a way that affects children's data, parents are asked to accept the new version before the next registration. Contact: reply to any competition e-mail or use the ? button in the app.