Privacy Policy
The short version
- You can practice without an account. Your progress then stays in your own browser, not with us.
- If you create an account, we store your name, your email and your results, so you can pick up where you left off on any device and earn certificates.
- We don't sell your data, and we don't show ads.
- We only use cookies the site needs to work. Our analytics use no cookies.
- You only get emails with practice tips and offers if you said yes to them, and you can unsubscribe at any time.
Who is responsible for your data
PracticeExcel (practiceexcelonline.com) is run by Komputer Club, Danish company registration (CVR) number 34921504, Ejler Billes Allé 11, 2. 3, 2300 København S, Denmark. We are the data controller for the personal data we process about you.
If you have questions about how we handle your data, or want to use your rights, email hey@practiceexcelonline.com.
PracticeExcel and its Danish edition ExcelOpgaver (excelopgaver.dk) are the same service, run by the same company. This policy covers both. Because we are based in Denmark, the EU General Data Protection Regulation (GDPR) applies to everything we do, wherever you live.
What we collect
When you practice without an account
Your answers are graded in your browser. Your progress and your best times in the shortcut drills are saved in your browser's local storage on your own device. If you create an account later, we move your progress to it.
When you create an account
- Your name and email address. Your name appears on your certificates.
- Your password, if you sign up with email. We only store a hash of it, never the password itself.
- If you sign in with Google, we receive your name, email address, profile picture and a Google account ID. We get no other access to your Google account.
- Your language, your time zone, and whether and when you agreed to emails with practice tips and offers.
When you practice and take tests
- The formulas you type, whether they were correct, how long you took and which hints you saw.
- Your points, streak, completed lessons and test results.
When you buy Premium
Payment happens at Polar (see below), and we never see your card details. From Polar we receive a customer ID, which plan you have, whether it is active, and when it renews or ends.
Certificates
A certificate shows your name, the topic or test, your score and the date. Each certificate has a page with a random link, so an employer can check that it is real. Anyone with the link can see the page, but it is hidden from search engines.
If you share a certificate on LinkedIn, you do it from your own LinkedIn account. We send no data about you to LinkedIn, but we note that you shared it, so you can earn bonus points.
The leaderboard
When the leaderboard is open, it shows your name, profile picture and points. You can hide yourself from it under Account.
When you visit the site
Like every web server, ours receives your IP address and details about your browser. We use them to serve the page and to protect the site from abuse, for example by limiting how many times someone can try a password. We don't store IP addresses in our database.
For analytics we use OpenPanel. It records which pages are viewed and what happens in the lessons: for example that a lesson was started or completed, whether an answer was correct, that a test was finished, that a certificate was shared and that a checkout was started. OpenPanel uses no cookies and doesn't store your IP address. Visits without an account are counted with an anonymous ID that changes every day, so you can't be followed from one day to the next. When you are signed in, we send your internal user ID, never your name or email, so we can see how lessons are used across devices.
Why we use it, and our legal basis
| Purpose | Legal basis under the GDPR |
|---|---|
| Your account, grading your answers, your progress, certificates and answering your emails | Our contract with you (Art. 6(1)(b)) |
| Essential emails: confirm your email, reset your password, invitations | Our contract with you (Art. 6(1)(b)) |
| Emails with practice tips and offers on days 1, 3 and 7 after you sign up | Your consent (Art. 6(1)(a)) |
| Analytics, so we can see which lessons are too hard and improve the site | Our legitimate interest (Art. 6(1)(f)) |
| Security and preventing abuse | Our legitimate interest (Art. 6(1)(f)) |
| Purchase records we are required to keep | Legal obligation under Danish bookkeeping law (Art. 6(1)(c)) |
Who we share it with
We use a few providers that process data on our behalf (processors). They may only use it to provide their service to us.
- Hetzner Online GmbH, Germany: servers and database. Your data is stored in the EU.
- Cloudflare, Inc., USA: all traffic to the site passes through Cloudflare's network, which protects it from attacks, and Cloudflare sends our emails.
- OpenPanel AB, Sweden: analytics. Data is stored on servers in Germany.
Some recipients are controllers in their own right and follow their own privacy policies:
- Polar Software, Inc., USA, sells our subscriptions as our reseller (merchant of record). Polar takes the payment, sends the receipt and handles sales tax. Card payments go through Stripe. See Polar's privacy policy.
- Google (Google Ireland Limited), if you sign in with Google. See Google's privacy policy.
- LinkedIn, if you choose to share a certificate there.
We only disclose data to authorities when the law requires it.
Transfers outside the EU
Cloudflare and Polar are US companies, so data may be processed in the United States. These transfers rely on the European Commission's Standard Contractual Clauses and, for Cloudflare, the EU-U.S. Data Privacy Framework. Email us for a copy of the safeguards.
How long we keep it
- Your account and results: for as long as you have an account. If you ask us to delete it, we delete it within 30 days.
- Certificates: for as long as your account exists. When the account is deleted, the certificate link stops working.
- Purchase records: 5 years from the end of the financial year of the purchase, as Danish bookkeeping law requires.
- Email confirmation and password reset links: they expire quickly and work only once.
- Server logs with IP addresses: 30 days at most.
- Analytics: 2 years at most.
Your rights
You have the right to:
- access the data we hold about you
- correct data that is wrong. You can change your name yourself under Account
- have your data deleted
- restrict how we process it
- receive your data in a common machine-readable format (data portability)
- object to processing based on our legitimate interest, such as analytics
- withdraw your consent to emails at any time, with the link at the bottom of every email or under Account
Email hey@practiceexcelonline.com from the address your account uses, and we'll reply within one month.
Complaints
If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, datatilsynet.dk, or to the data protection authority where you live. We'd like to hear from you first, though, so we can put it right.
Changes
When we change this policy, we update the date at the top. If the changes are significant, we'll email you before they take effect.
See also our cookie policy and our terms.