← Back to home

Privacy Policy

Last updated: March 2026

1. Data Controller

2. Data We Collect

When you create an account on CertLabs.app, we collect:

  • Name (entered during registration)
  • Email address
  • Password (stored encrypted by Firebase Authentication; we never access it in plain text)
  • Activity data: exam attempts, scores, questions answered, and registration date

We do not collect payment data, postal address, phone number, or any other personal data.

3. Purpose and Legal Basis

We process your data to:

  • Manage your account and authentication — legal basis: contract performance
  • Display your attempt history and statistics in your profile — legal basis: contract performance
  • Send you the account verification email — legal basis: contract performance
  • Respond to enquiries sent via email — legal basis: legitimate interest

4. Data Processors

CertLabs.app uses Firebase (Google LLC) as its authentication and database platform. Firebase acts as a data processor under Google Cloud's Data Processing Agreement, which includes EU Standard Contractual Clauses for data transfers to the United States.

We do not share or sell your data to any other third party.

5. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, unless legally required to retain it.

6. Cookies and Local Storage

CertLabs.app does not use tracking or advertising cookies. We only use browser localStorage to store your language and theme (light/dark) preferences. This data is not transmitted to any server and remains on your device.

Firebase Authentication may use local storage to maintain your session. You can clear this data by logging out or clearing your browser's site data.

7. Your Rights (GDPR)

Under Regulation (EU) 2016/679 (GDPR), you have the right to:

  • Access: obtain confirmation of whether we process your data and a copy of it
  • Rectification: request correction of inaccurate data
  • Erasure: request deletion of your data
  • Portability: receive your data in a structured, machine-readable format
  • Objection: object to processing based on legitimate interest

To exercise any of these rights, email us at hola@certlabs.app. You may also lodge a complaint with your local data protection supervisory authority.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The last updated date is shown at the top of this page. We recommend reviewing it periodically.