Privacy Policy

Last updated: 21 September 2026

PlumbRevise is committed to protecting your privacy. This policy explains what we hold about you, who else handles it, how long we keep it and how to have it removed.

What we collect

When you create an account we hold your email address, a display name and, if you set one, a password. Passwords are stored only as a one-way hash, so nobody at PlumbRevise can read yours. If you sign in with Google instead, Google tells us your name, email address and profile picture.

As you study we record the questions you answer, whether you were right, how confident you said you were, and any issue you report, so we can show your progress and readiness. While you are signed in we also hold the IP address and browser type of your session, which we use to keep accounts secure and to limit abuse.

How we use it

Data is used solely to provide and improve the service, manage user accounts, and process premium subscriptions. We do not sell or rent user data to third parties.

We email you only about your account, for example to confirm a new account or send a password-reset link you have asked for. We do not send marketing email unless you switch it on in your account settings, and you can switch it off again there at any time.

Payments

Premium is paid for through Stripe. You enter your card or wallet details on Stripe’s own checkout page, so PlumbRevise never sees or stores them. We keep a reference to your Stripe customer and subscription, and the status and renewal date of your plan. Stripe keeps its own payment records as the law requires of it; see the Stripe privacy policy.

Who else handles your data

PlumbRevise is hosted by Cloudflare, which also sends account email. Payments are handled by Stripe, usage measurement by Google Analytics, advertising measurement by Meta, and Google sign-in by Google. These companies act on our instructions or under their own published privacy terms.

Analytics

We use Google Analytics 4 to understand page views, product usage, sign-in method, checkout starts, and similar non-sensitive events. We do not send your email address, name, payment details or study answers to Google Analytics as event fields.

Advertising

When you buy Premium, we tell Meta, the company behind Facebook and Instagram, so we can see which of our ads lead to sales. We send the amount, your billing country, the IP address and browser type you used to start checkout, and a hashed form of the email address you paid with, which Meta uses to match the purchase to a Facebook or Instagram account. We do not use Meta cookies or tracking pixels on this site.

Cookies & Security

Essential cookies are used to maintain active sign-in sessions and to remember if you turn analytics off. Guest practice remembers your last question on this browser for up to 30 days. Google Analytics may also set analytics cookies to measure usage and improve the service. Standard security practices are maintained to protect user information.

How long we keep it

We keep your account and study history for as long as you have an account. When you delete your account they are removed from the live service straight away. Encrypted backups are kept for up to twelve months and then destroyed, so a deleted account can remain inside a backup for that long; we only ever use backups to recover from a failure.

Your rights

You can delete your account yourself from your account page; if you have Premium, cancel it first so that you are not billed again. You can also ask us for a copy of what we hold about you, to correct or delete it, or object to how we use it, by emailing us. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Contact

For privacy questions, email help@plumbrevise.co.uk.