Privacy Policy

Last updated: June 2026

1. Overview

ExamDB (examdb.org) is a read-only information service. We do not require registration, do not have user accounts, and do not collect personal information from visitors as part of using the service.

2. Information We Collect

2a. Server and Access Logs

Our servers automatically record standard web server logs when you access the site. This includes:

  • IP address
  • Browser type and version (User-Agent)
  • Pages accessed and timestamps
  • Referring URL

This data is used solely for security, abuse prevention, and diagnosing technical issues. Logs are retained for a maximum of 30 days and are not shared with third parties.

2b. Rate Limiting

To prevent abuse, we apply rate limits to API requests. Your IP address is used temporarily to enforce these limits and is not stored permanently.

3. Cookies

ExamDB uses a single cookie to remember your light/dark theme preference. This cookie:

  • Contains no personal information
  • Is stored only in your browser
  • Is never sent to any third party

We do not use tracking cookies, analytics cookies, or advertising cookies.

4. Third-Party Services

Vercel

The frontend is hosted on Vercel. Vercel may log request metadata for CDN and performance purposes. See Vercel's Privacy Policy.

Neon & Upstash

The API and database are hosted on a VM that connects to Neon (managed Postgres) and Upstash (managed Redis, used only for API rate-limiting). No third-party reverse proxy or CDN sits in front of the API.

5. Data We Do Not Collect

To be explicit, ExamDB does not collect:

  • Names, email addresses, or any personal identifiers
  • Payment or financial information
  • Device identifiers or fingerprints
  • Location data beyond IP-level country/region
  • Browsing history across other sites
  • Any data for advertising or remarketing purposes

6. Data Sharing

We do not sell, rent, or share any user data with third parties for commercial purposes. Data is only shared where required by law or to operate the service (e.g., the infrastructure providers listed above).

7. Children's Privacy

ExamDB is a general-purpose informational service. We do not knowingly collect data from children under 13. If you believe a child has submitted personal information, contact us and we will delete it.

8. Your Rights

Since we do not collect personal data tied to your identity, most data rights (access, erasure, portability) are not applicable in the traditional sense.

If you believe your IP address is stored in logs and you wish to request its deletion, contact us at hello@examdb.org and we will handle it within 30 days.

9. Data Security

We use HTTPS for all traffic. Our database contains only public exam information — no user personal data is stored in our database. Server access is restricted to authorised operators only.

10. Changes to This Policy

We may update this policy as the service evolves (e.g., if user accounts are added in the future). The “last updated” date at the top reflects the most recent revision. Significant changes will be noted on the site.

11. Contact

Questions, concerns, or requests: hello@examdb.org