Privacy Policy

Last updated: 23 July 2026

CertSprint ("we", "us") is operated by TEMIS MOPS S.R.L., registered in Romania (CUI: 49268198, registered office: PTA. ABATOR, Nr.4-7, Bl.B, Sc.2, Et.3, Ap.27, Cluj-Napoca, Romania). We are the data controller for personal data processed through certsprint.app. Contact: hello@certsprint.app.

What we collect and why

Account data — your email address and a securely hashed password, plus email confirmation status. Purpose: creating and operating your account. Legal basis: performance of a contract.

Purchase data — which pass you bought, when, the amount, and your billing country. Payments are processed by Stripe; your full card details are handled by Stripe and never touch our servers. Invoices include the details required by tax law. Legal basis: contract and legal obligation (tax and accounting rules).

Practice activity — your quiz attempts, answers, and scores. Purpose: showing your results, progress, and pass-line tracking. Legal basis: contract.

Marketing consent — if you tick the optional box at signup, we record your consent (with a timestamp) and add your email to our mailing audience. Legal basis: consent, withdrawable at any time via the unsubscribe link in any marketing email or by writing to us. Declining has no effect on your use of the service.

Analytics and session data — with your cookie consent, we use Google Analytics 4 and Microsoft Clarity to understand how the site is used (pages, events, anonymized session replays with inputs masked). Without consent, these tools do not set cookies. Legal basis: consent, managed through the cookie banner. You can change your choice anytime via the cookie settings link in the footer.

Technical logs — IP addresses and request logs processed by our hosting for security and reliability. Legal basis: legitimate interest (keeping the service secure and available).

Who processes data on our behalf

We use these processors: Supabase (database and authentication, hosted in Frankfurt, EU), Vercel (hosting/CDN), Stripe (payments and invoicing), Resend (transactional and, with consent, marketing email), Google (Analytics, Tag Manager, Ads measurement), Microsoft (Clarity), Usercentrics/Cookiebot (consent management), and our email forwarding provider for support mail. Some providers process data in the United States under the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Retention

Account and activity data are kept while your account exists and deleted upon account deletion, except data we must keep longer by law (invoicing and accounting records are retained for the period required by Romanian law). Analytics data is retained for 14 months. Consent records are kept as evidence of compliance.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; where processing is based on consent, you may withdraw it at any time without affecting prior processing. Write to hello@certsprint.app — we respond within one month. You may also lodge a complaint with your local supervisory authority; in Romania this is ANSPDCP (dataprotection.ro).

Other things worth knowing

We do not sell personal data. We do not knowingly provide services to children under 16. We do not make decisions producing legal effects based solely on automated processing. If we change this policy, the date above changes and material updates will be communicated on the site.