Terms & Privacy

By accessing or using CrackTMUA (“we”, “us”, “our”), you agree to be bound by these Terms of Service. If you do not agree, you may not use the platform. These terms constitute a legally binding agreement between you and CrackTMUA.

You must be at least 13 years old to use CrackTMUA. If you are under 18, you confirm that you have your parent or guardian's consent to use the service.

CrackTMUA is an online examination preparation platform for the Test of Mathematics for University Admission (TMUA). The service includes access to a question bank, worked solutions, mock examinations, progress tracking, and spaced repetition tools.

We reserve the right to modify, suspend, or discontinue any part of the service at any time with reasonable notice. We will provide at least 30 days' notice of any material changes that affect existing Premium users.

You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account.

You must notify us immediately at support@cracktmua.com if you suspect unauthorised access to your account.

We reserve the right to suspend or terminate accounts that violate these terms, engage in fraudulent activity, or that have been inactive for more than 24 months. For inactivity-based terminations we will give at least 14 days' written notice; suspensions for security or terms violations may take effect immediately.

Free plan: Access to 10 practice questions per day, worked solutions for up to 20 questions per day (a fair-use limit; questions you have already attempted stay available), the official specimen and CrackTMUA Mock 0 mock papers, and basic progress tracking. No payment required, no time limit.

Refer-a-friend scheme. From time to time we operate a referral scheme under which the free plan's daily question allowance is temporarily increased (currently to 20 questions per day for 5 days) for both a referrer and a referred friend, once the referred friend has created an account via the referrer's link, confirmed their email address, completed the starter diagnostic, and answered three practice questions. A referrer's invite link becomes active once they have themselves answered five practice questions. Each account may be referred once; a referrer may earn the reward for up to five qualified referrals, and a referrer's accumulated boost period will not extend more than ten days ahead at any time (a referred friend's reward is unaffected by this limit). The reward modifies the free daily allowance only, temporarily; it conveys no Premium access, has no monetary value, and cannot be exchanged, transferred, or redeemed. The scheme is promotional and offered at CrackTMUA's sole discretion: we may change, pause, or withdraw it at any time, and we reserve the right to refuse, withhold, or withdraw rewards, and to take action under Section 5, where we reasonably believe accounts have been created or operated to abuse the scheme — including self-referral, fabricated or automated accounts, or any other conduct designed to obtain rewards not genuinely earned. None of this affects your statutory rights.

Premium plan: A one-time payment of £69 grants access to all Premium content, including the full question bank, all mock examinations, spaced repetition, and advanced analytics, for a period of 12 months from the date of purchase. This is not a subscription and you will not be charged automatically. After 12 months, access to Premium features expires; you may purchase again at the then-current price to continue. Free features remain available indefinitely.

Price changes. We may change the price of Premium at any time. Where a price change is announced with a countdown on the site, that countdown is accurate: the checkout charges the new price from the moment it reaches zero, and not before. A price change never affects a purchase you have already made, and it never affects access you have already paid for. The price that binds you is the one displayed at checkout at the moment you complete your purchase. Nothing here affects your statutory consumer rights.

All card payments are processed by Stripe, Inc. and its affiliated entities (“Stripe”), our payment service provider. Stripe handles secure capture of card details, 3D Secure authentication, fraud screening, and dispute mechanics. We do not store, see, or have access to your full payment card details at any point. CrackTMUA is the legal seller for every Premium purchase; your contract of sale is with CrackTMUA, not with Stripe. Stripe acts solely as the payment intermediary.

Prices on this site are quoted in GBP and represent the full and final amount payable by you at checkout. Where your payment card or account is denominated in a currency other than GBP, your card issuer or bank may apply foreign-exchange conversion and any associated surcharge at its own rates; CrackTMUA does not control and does not receive any portion of those amounts. CrackTMUA is a registered business name of PANGEA GADGETS, a sole proprietorship registered in Hong Kong. The VAT, goods-and-services tax, or sales-tax treatment of digital services supplied across borders depends on your country of residence and on the tax rules then in force; in particular, the United Kingdom imposes no registration threshold on non-established taxable persons supplying digital services to UK consumers, and the European Union similarly imposes no threshold under its non-Union One Stop Shop scheme.

Where any such registration applies to CrackTMUA, we will register and account for the relevant tax as required, and we will update these terms before any change in the price you see at checkout takes effect. Until each such registration is live, the listed price is the entire amount payable by you in respect of your purchase, and any VAT, GST, or sales-tax liability that may arise on the supply rests with CrackTMUA and not with you. You have no obligation to pay any further amount to us or to any tax authority in respect of your purchase, and your statutory consumer rights are unaffected.

7-day money-back guarantee. We want every Premium purchaser to feel they got their money's worth. If within seven (7) days of your Premium purchase you decide CrackTMUA is not for you, we will refund your payment in full, provided that at the time of your request you have not (a) accessed more than five (5) Premium-only questions, or (b) started or completed more than one (1) Premium mock paper. To be explicit about what that allows: you may open up to five Premium questions, and you may sit one full mock paper start to finish, and still claim a full refund. The free mock papers (the official specimen and CrackTMUA Mock 0), and the questions in them, never count towards either limit: sitting them, in full and as often as you like, does not affect your refund. To request a refund within this window, email support@cracktmua.com from the email address on your account. We will action eligible requests within five (5) business days. This guarantee is limited to one refund per person and per account. It does not apply where an account shows automated, scripted, shared, or bulk activity, or where the conditions above have been circumvented, and we may decline any request that we, acting reasonably and in good faith, consider an abuse of this policy.

By completing the Premium checkout, you expressly consent to us beginning supply of digital content immediately and you acknowledge that, to the extent your use of Premium content exceeds the limits in the preceding paragraph, your statutory right of withdrawal under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 is lost in accordance with regulation 37(1)(a) of those regulations.

Outside the 7-day window described above, we do not offer refunds as a matter of policy. We reserve the right, at our sole and absolute discretion, to grant a partial or full refund in genuinely exceptional circumstances. Examples include a prolonged service outage attributable to us, a duplicate or accidental charge, or a serious data-handling failure on our side that materially affects your access. Dissatisfaction with the difficulty, style, or volume of content does not qualify, nor does a change in your examination or application plans.

All refunds, where granted, are processed via Stripe to the original payment method and may take 5 to 10 business days to appear. Nothing in this refund policy excludes, restricts, or modifies any consumer rights you have under applicable law that cannot be excluded, restricted, or modified by agreement, including, where you are a consumer in the United Kingdom, your rights under the Consumer Rights Act 2015 and the Consumer Contracts Regulations 2013.

You agree not to:

• Share your account credentials or access with others
• Reproduce, distribute, or commercially exploit any content from the platform without our prior written consent
• Attempt to scrape, reverse-engineer, or extract question data programmatically
• Use the platform to engage in academic dishonesty in any formal assessment context
• Attempt to circumvent any access controls, paywalls, or security features
• Upload or transmit any malicious code, spam, or harmful content
• Create or operate accounts to abuse promotional schemes, including referring yourself or using fabricated accounts to obtain referral rewards
• Harass, impersonate, or harm other users

Violations may result in immediate account termination without refund.

6.1 Our original content. The platform's source code, UI, design, brand, and our original editorial material — including premium questions we author ourselves, worked solutions, step-by-step explanations, hints, trap commentary, topic and difficulty classifications, and any other writing or imagery we produce — is the intellectual property of CrackTMUA and is protected by United Kingdom copyright law and applicable international treaties.

6.2 Third-party past-paper content. CrackTMUA reproduces certain question stems, answer keys, figures, and accompanying material from official Test of Mathematics for University Admission (“TMUA”) past papers and specimen papers, in some cases verbatim, for the purpose of focused candidate preparation. All such third-party material is the property of its respective rights holder, which may include (without limitation) the University of Cambridge, Cambridge Assessment Admissions Testing, the Cambridge Assessment Group, the University Admissions Tests UK (“UAT-UK”), the Universities Admissions Programme, Pearson VUE, Imperial College London, the Admissions Testing Service, or such other administrator or licensor of the TMUA materials as may from time to time hold the relevant rights (each a “Rights Holder”). CrackTMUA claims no ownership of, and asserts no exclusive rights in, any such third-party material.

6.3 Basis of reproduction. CrackTMUA reproduces third-party past-paper material in good faith for the purpose of original critical commentary, analysis, and review, and in reliance (as applicable) on: (a) the fair-dealing quotation right under section 30(1ZA) of the United Kingdom Copyright, Designs and Patents Act 1988, which permits a quotation from a work made available to the public where the use is fair, proportionate to the purpose, and accompanied by sufficient acknowledgement, and which is available irrespective of whether the use is commercial; (b) the connected fair-dealing rights for criticism and review under section 30(1)–(2) of the same Act; (c) the equivalent or analogous exceptions, public-domain status, or implied permissions available under the law of any other jurisdiction from which the platform is accessed; and (d) any specific permission, sub-licence, or arrangement we may have obtained from a Rights Holder.

6.3a Transformative purpose and non-substitution. CrackTMUA does not present third-party past-paper material as a standalone reproduction of the original work. Each reproduced question is embedded within a substantial original editorial layer — worked step-by-step solutions, trap and pitfall commentary, hint progressions, topic and difficulty classification, spaced-repetition scheduling, and accuracy analytics — none of which are provided by any Rights Holder and none of which existed prior to CrackTMUA's authorship. The platform's function is to enable focused critical analysis of the test format and of the reasoning required to attempt each question, not to provide a free or paid substitute for the underlying paper. CrackTMUA does not compete with any priced market in TMUA past papers, since the official administrators release those papers to the public without charge.

6.4 No affiliation; trademarks. CrackTMUA is an independent preparation service. We are not affiliated with, endorsed by, sponsored by, certified by, or in any way officially connected to the University of Cambridge, Cambridge Assessment Admissions Testing, the Cambridge Assessment Group, the University Admissions Tests UK (UAT-UK), the Universities Admissions Programme, Pearson VUE, Imperial College London, or any current or historic administrator, examiner, or rights holder of the TMUA. “Test of Mathematics for University Admission”, “TMUA”, “Cambridge Assessment”, and any associated names, logos, or marks used on this platform are used solely for descriptive and educational reference; all rights, including any trade-mark rights, remain with their respective owners.

6.5 Rights-holder notice and takedown. If you are a Rights Holder (or duly authorised to act on behalf of one) and you believe that any material on CrackTMUA has been reproduced without an appropriate basis or otherwise infringes your rights, please email support@cracktmua.com with (i) a description of the material concerned; (ii) the URL(s) where it appears on the platform; (iii) a statement of the basis on which you assert rights and your authority to act; and (iv) contact information for follow-up. We will acknowledge legitimate notices within five (5) business days and, where the notice is substantiated, remove or restrict access to the identified material promptly. This procedure is offered in good faith and without prejudice to any defences, rights, or limitations of liability we may otherwise have.

6.6 Your licence to use the platform. Subject to your continuing compliance with these terms, we grant you a personal, revocable, non-exclusive, non-transferable, non-sublicensable licence to access and use the platform (including any third-party past-paper material reproduced on it) solely for your own preparation for the TMUA or related university admissions, and solely for non-commercial personal study. This licence does not permit you to: (a) reproduce, redistribute, republish, mirror, host, or screenshot for public posting any content from the platform; (b) scrape, crawl, or programmatically extract questions, solutions, or any other content; (c) use any content (whether ours or a Rights Holder's) to train, fine-tune, evaluate, or otherwise improve any machine-learning or artificial-intelligence model; (d) commercially exploit any content; or (e) sub-license, sell, lease, or otherwise transfer your account or access. Use beyond this licence may infringe our rights, a Rights Holder's rights, or both.

6.7 No warranty of originality; allocation of risk. CrackTMUA makes no representation or warranty that the inclusion of any particular third-party past-paper material on the platform is authorised or licensed by every relevant Rights Holder. To the maximum extent permitted by applicable law, CrackTMUA accepts no liability for any claim, loss, or damage arising from (i) your reliance on any third-party past-paper material accessed via the platform; (ii) your reproduction or redistribution of that material outside the licence in clause 6.6; or (iii) any subsequent assertion of rights by a Rights Holder in respect of that material. Nothing in this clause limits our liability for fraud or fraudulent misrepresentation, or any other liability which cannot be excluded or limited under applicable law, and nothing here excludes, restricts, or modifies any non-waivable consumer rights you may have under the Consumer Rights Act 2015 or analogous legislation in your jurisdiction.

CrackTMUA is provided “as is” and “as available” without warranties of any kind, express or implied. We do not guarantee that use of the platform will result in any particular examination score or university admission outcome. Past performance of any content is not indicative of future results.

We make reasonable efforts to ensure content accuracy but cannot guarantee that all questions, solutions, or information are free from errors. If you identify an error, please contact us and we will correct it promptly.

We do not warrant uninterrupted or error-free access to the service and shall not be liable for any interruptions caused by maintenance, technical failure, or events beyond our reasonable control.

Comparative information. Any comparison we publish between CrackTMUA and other providers reflects publicly available information taken from those providers' own websites that we believe to be accurate as of the date shown on the comparison. Prices and features change, and we do not continuously monitor third-party sites; such comparisons are provided for general guidance only, are not a representation or warranty about any other provider's current offering, and should not be relied upon without verifying the current details directly with the relevant provider.

To the maximum extent permitted by applicable law, CrackTMUA shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill, arising from your use of or inability to use the service.

Our total aggregate liability to you for any claim arising out of or related to these terms or the service shall not exceed the total amount you have paid us for Premium access in the 12 months preceding the claim. For users who have not paid us anything, our aggregate liability shall not exceed £50.

Nothing in these terms limits our liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation, or any other liability that cannot be excluded or limited under applicable law.

You may delete your account at any time from the account settings page. Deletion is immediate and cannot be undone; we keep no copy that could be restored later. We will ask, optionally, why you are leaving, and you can decline and still delete. Everything except limited records we are required to keep (such as transaction and tax records), residual copies held in encrypted backups, and the anonymous items described in the “Your Rights” section of the Privacy Policy is removed at the point of deletion.

Premium access is tied to your account. If you delete your account, your Premium access will be lost and we are unable to transfer it to a new account. Deleting your account does not, by itself, entitle you to a refund; any refund eligibility is governed by the refund policy in section 4 above.

10.1 The community. CrackTMUA includes an optional community where members can post discussions and questions, reply to others, send private messages, vote, and build a public profile. Using the community requires an account and a chosen username. Your public profile (your username, display name, and any optional bio or avatar) and anything you post publicly are visible to anyone, including logged-out visitors and search engines, and may be indexed. Do not post anything you would not want to be public, and do not share confidential, personal, or identifying information about yourself or others.

10.2 Your content and the licence you grant. You retain ownership of the threads, posts, replies, messages, and other material you submit (“User Content”). By submitting User Content you grant CrackTMUA a worldwide, non-exclusive, royalty-free, sub-licensable licence to host, store, reproduce, display, adapt for formatting, and distribute that content on and in connection with operating and promoting the platform. You may delete your User Content at any time; copies may remain in backups or caches for a limited period, and replies or quotations by others may persist. You represent that you own or have the necessary rights to everything you post and that it does not infringe anyone's rights or break the law.

10.3 Community rules. In addition to the Acceptable Use terms in section 5, you must not post, transmit, or share User Content (including in private messages) that: (a) is unlawful, defamatory, harassing, threatening, hateful, or discriminatory; (b) is spam, advertising, or solicitation; (c) is sexually explicit or otherwise inappropriate for a study community; (d) infringes any intellectual-property, privacy, or other right; (e) impersonates any person or misrepresents your affiliation; (f) discloses another person's private or identifying information; (g) solicits or facilitates cheating in any live or formal assessment; or (h) contains malware or links to it. Reproducing our paywalled or premium content publicly is prohibited under section 6.6.

10.4 Private messages. Members can message one another. Messages are private between the participants, and we do not use their content for analytics or advertising and do not routinely read them. However, we may access, store, and review message content where reasonably necessary to operate the service, comply with the law, enforce these terms, or protect the safety of users. You can block another member at any time. Do not use messaging to spam, harass, or send anything prohibited by section 10.3.

10.5 Moderation and enforcement. We may, at our discretion and without prior notice, remove, edit, hide, lock, pin, or move any User Content, and may suspend, restrict, or terminate any account, where we consider it necessary to enforce these terms or protect the community. We have no obligation to host, monitor, pre-screen, or retain any User Content. Members can report content, and reports are reviewed by our moderators. Our moderation decisions are made in good faith but we do not guarantee that all prohibited content will be identified or removed.

10.6 No endorsement; your responsibility. User Content reflects the views of the members who post it, not of CrackTMUA, and we do not verify its accuracy. You are solely responsible for the content you post and for your interactions with other members. To the maximum extent permitted by law, CrackTMUA is not liable for User Content or for any loss arising from your use of, or reliance on, the community or any communication with other members.

CrackTMUA is a registered business name of PANGEA GADGETS, a sole proprietorship registered in Hong Kong under the Business Registration Ordinance, serving the United Kingdom and international markets. References in these terms to “CrackTMUA”, “we”, “us” and “our” are to that sole proprietorship. Notwithstanding our place of business, these Terms of Service are governed by, and construed in accordance with, the laws of England and Wales, and the courts of England and Wales shall have non-exclusive jurisdiction over any disputes arising from these terms or your use of the service.

Nothing in this clause limits your right, where you are a consumer, to bring proceedings in the courts of your country of residence, or to rely on mandatory consumer protections available to you under the law of that country.

If any provision of these terms is found to be unenforceable, the remaining provisions shall continue in full force and effect.

We collect only what is necessary to provide the service:

• Account data: Email address and encrypted password when you register
• Google sign-in data: If you sign in with Google, your name, email address and profile picture from your Google account (see “Information We Receive From Google” below)
• Usage data: Questions attempted and answers selected, time spent per question, how often you change an answer before submitting, whether you open a worked solution, mock-examination sittings and scores, and timestamps. We use this to power your progress dashboard (accuracy, timing and pace insight, your weakness map, and your predicted-band estimate), your spaced-repetition schedule, and to improve the service. We also store a periodic snapshot of your predicted band so that you and we can see how it changes over time. When you build a quiz we store how you configured it (the filters and pacing you chose), which questions it drew, and whether you finished or left it, so you can look back at it in your quiz history and pick up an interrupted one; if you save a quiz setup of your own, we store that too.
• Product analytics: In-product events used to understand how the service is used, where people get stuck, and how to improve it and our conversion to Premium. Examples include which pages you view, the page you first landed on, the website or marketing campaign that referred you, the general type of device you are using (such as mobile or desktop), a per-visit identifier that lets us understand a single browsing session as a whole, your interface theme preference (light or dark) and the local time of day you are active, how far you scroll through and how long you spend reading our guides, reaching the daily free-question limit, viewing pricing, or starting an upgrade. We also record interactions with specific features so we can tell which ones help and which confuse: opening or working through the worked solution shown to signed-out readers, opening the sign-up form and whether it was completed or closed (we record only that fields were filled in, never what you typed), which links you follow inside our guides, how you use the practice questions embedded in a guide (whether you answered, whether you were right, and how long you spent), how you use quiz mode (opening the quiz builder, viewing your quiz history, and saving or re-using a saved setup), whether you open or dismiss our product-update notice and how long you spend reading the update page, and, if you start the account-deletion flow, that you opened it and which reason you chose (this event is deleted along with everything else when the deletion completes; only the separate anonymous record described under “Your Rights” survives). We collect these both when you are signed in (tied to your account) and before you register, in which case they are tied only to a random identifier stored in your browser, not to your identity. If you later create an account, we may link that pre-registration activity to your account. These set no additional cookies and involve no third-party advertising or cross-site tracking.
• Site analytics: We use Cloudflare Web Analytics, a privacy-first service, to measure aggregate traffic to the site (pages viewed, the referring website, and approximate country). It is cookieless, does not track individual visitors or follow you across other websites, and collects no personal data. This data is processed by Cloudflare on our behalf and is only ever shown to us in aggregate.
• Email you choose to give us: If you submit your email address through an optional form on a guide or article (without creating an account), we store it so we can send you TMUA key dates and preparation tips as the exam approaches. This is opt-in, we never sell or share it, and every email has a one-click unsubscribe. You can ask us to delete it at any time by emailing us.
• Email engagement: When we send you an email (a study reminder, a purchase receipt, or a resource you asked for), we use standard measurement, via our email provider, to see whether it was delivered, whether it was opened, and whether you clicked a link. This uses a small tracking pixel and click-through links, and it helps us tell whether our emails are useful and improve them. Opens are only an approximate signal. You can stop non-essential emails at any time with the one-click unsubscribe in every such email or from your account settings; essential account emails (such as purchase receipts) are still sent.
• Approximate location: A country-level code, and where available a coarse region or city, derived from your connection via Cloudflare, so we can understand where our visitors are and prioritise the product accordingly. We collect this both when you are signed in (stored with your account) and before you register, in which case it is tied only to the random per-browser identifier described under Product analytics, not to your identity. This is approximate and coarse; we never store your IP address.
• How you heard about us: During setup we ask, optionally, how you found CrackTMUA (for example a search engine, a friend, a forum, or your school). It is a single multiple-choice question (with an optional short “Where?” box if you pick somewhere else), you can skip it, and it is stored only so we understand which channels bring students to us. We never use it to identify you or to contact anyone.
• Ratings and feedback: If you rate one of our mock papers, or tell us whether a worked solution was clear or a question was good, we store your answers and any note you add with your account, together with your score on that sitting or whether you got that question right, so we can fix mistakes and improve our questions. It is always optional. We only quote a comment publicly if you ticked the box allowing it.
• After-exam check-in: If you answer our optional check-in after a TMUA sitting, we store your answers with your account: whether you sat it; if you did, how each paper compared with past papers and our mocks, the time, roughly how many answers were guesses, what helped, what else you used, the score you expected and, only if you choose to share it, the score you received; if you did not, which sitting you plan instead and why, or why not; and in either case what you would change and how likely you are to recommend us. We use them to check our mock papers and predicted band against the real exam. We only ever publish totals, never your name. If you add a line of advice and tick that we may quote it, we may show it on CrackTMUA with your first name only; you can ask us to remove it at any time.
• Referral data: If you join through a friend's invite link, or invite a friend yourself, we store the link between the two accounts (who referred whom, when, and whether the qualifying steps were completed) so we can grant, display, and if necessary withdraw the reward, and so we can detect abuse of the scheme. Your referral code is a random string and reveals nothing about you; we never show your friend your activity, or you theirs, beyond the fact that a referral completed.
• Community data: If you use the community, your public profile (username, display name, and any optional bio or avatar), the threads, posts and replies you publish, your votes, reputation, and badges. Public posts and profiles are visible to anyone, including logged-out visitors and search engines.
• Private messages: The content of direct messages you send to other members, stored so they can be delivered and shown to the recipient. We do not use message content for analytics or advertising and do not routinely read it, but we may access it where necessary for safety, abuse-prevention, or legal reasons.
• Payment data: Transaction reference, last-four digits of the card (for reconciliation and dispute handling), and plan status. Full card details are never sent to or stored by us; they are handled exclusively by Stripe as our payment processor.
• Technical data: Browser type, IP address, and approximate location for security and abuse prevention

We do not collect sensitive personal data, and we do not require your date of birth or school. We only hold your name if you sign in with Google or add it to your profile yourself.

If you choose “Continue with Google”, Google shares three things with us, with your permission: your name, your email address and your profile picture. These come from the basic sign-in permissions only (openid, email and profile). We use them only to:

• create your CrackTMUA account and sign you in;
• show your name and picture in your account, and on your community profile if you use the community;
• send you the account emails and the optional study reminders described in this policy.

We do not ask for, and cannot access, your Gmail, contacts, calendar, Google Drive or any other data in your Google account. We do not sell Google user data, use it for advertising, or share it with anyone other than the service providers listed under “Data Sharing & Processors”, who process it only to run CrackTMUA. We keep it while your account is open and erase it when you delete your account (see “Your Rights”). You can also remove CrackTMUA's access to your Google account at any time at myaccount.google.com/permissions.

CrackTMUA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use your data to:

• Provide and operate the CrackTMUA platform
• Track your progress and personalise your learning experience
• Estimate your predicted TMUA band, analyse your timing and pace, and surface your weakest topics
• Operate the community, including showing your posts and profile, delivering messages and notifications, calculating reputation and badges, and moderating content
• Verify Premium access status
• Send transactional emails (account confirmation, password reset, payment receipt)
• Send optional study reminders (practice-lapse nudges and exam-countdown emails, personalised using your exam date, practice activity and predicted band) to help you keep your preparation on track
• Detect and prevent fraud, abuse, and security incidents
• Improve the platform based on aggregated, anonymised usage patterns

We will never use your data for advertising profiling or sell it to third parties. We will not send unsolicited marketing emails without your explicit consent.

Study reminders. If you have an account, we may send you the study reminders described above to support the exam preparation you signed up for. These are on by default, are always about your own preparation (never third-party advertising), and you can turn them off with one click from the link in any such email or from your account settings at any time.

Our legal basis for processing is: (a) contract performance, to provide the service you have signed up for; (b) legitimate interests, namely fraud prevention, product analytics, and platform improvement; and (c) consent, where we ask for your explicit permission (for example, marketing emails).

We share data only with trusted third-party processors necessary to operate the service:

• Supabase: Database and authentication infrastructure. Data is stored in the West EU (London) region under strict security controls.
• Stripe (Stripe, Inc. and its affiliated entities): Payment service provider for all card transactions. Stripe is PCI DSS Level 1 certified and handles secure card data capture, 3D Secure authentication, fraud screening, and dispute mechanics. We receive only a transaction reference and the last-four digits of the card for reconciliation; your full card details never reach us. Stripe's privacy notice is available at stripe.com/privacy.
• Cloudflare: Content delivery and DDoS protection. Cloudflare processes request metadata to route traffic securely.
• Resend: Our email delivery provider, used to send account and transactional emails, resources you request, and (where enabled) optional study reminders. Resend processes your email address and standard delivery and engagement signals (whether an email was delivered, opened, or had its links clicked) on our behalf. It is based in the United States, and the transfer is covered by appropriate safeguards (standard contractual clauses). Resend's privacy notice is available at resend.com/legal/privacy-policy.

All processors are contractually bound to process your data only on our instructions and in compliance with UK GDPR. We do not transfer your personal data outside the UK/EEA without appropriate safeguards.

Under UK GDPR you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (“right to be forgotten”)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request that we limit how we process your data
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, email support@cracktmua.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We keep your personal data for as long as your account is active. When you delete your account it is erased immediately rather than queued for later: your progress, answers, review deck, quiz history, mock results, community posts and messages, uploaded files, and your email address are all removed at once, including your address in our email-sending records, so nothing can reach you afterwards. The only exceptions are (a) limited transaction and tax records, which we retain for as long as applicable law requires (typically up to six to seven years), (b) residual copies held in encrypted backups, which are purged within 12 months, and (c) the two anonymous items described below. After those periods the data is permanently deleted.

What we keep after a deletion, and why it is not personal data. When you delete your account we ask, optionally, why you are leaving. If you answer, we keep your reason and anything you type in the box, together with a few deliberately blunt descriptions: roughly how long you had been registered (a range such as “1 to 4 weeks”, never a number of days), roughly how much you had used the site (a range such as “used it a bit”, never a count), whether you were on the free or Premium plan, and the month you left. This record carries no account identifier, no name, no email address, no exact date and no exact figures, and it is not linked to any other record we hold. The ranges are blunt on purpose: an exact date and an exact length of membership together would pin down when you joined, which could single you out even without your name. It exists so that a person leaving tells us something we can act on. You do not have to answer, and deleting your account never depends on answering.

Separately, if you had sent us a message through our contact form or reported a problem with a question, we remove your name and email address from it but keep the substance of the report, because a report such as “question 12 has the wrong answer” still needs fixing for everyone else and no longer identifies you once your details are gone. If you would rather we deleted the message itself as well, say so and we will.

We use minimal cookies and browser local storage strictly necessary for the service:

• Authentication session: A secure, httpOnly cookie to keep you logged in
• Theme preference: Stored in local storage to remember your dark/light mode choice
• Product-analytics identifier: A random per-browser identifier kept in local storage so we can understand product usage within a browsing session. It is first-party only, is never shared, and is not used for advertising or cross-site tracking.

We do not use advertising cookies, cross-site tracking, or analytics cookies that identify you individually on the website, and we do not use Google Analytics or similar services. The only measurement pixels we use are the standard open and click tracking inside the emails we send you (described under “Data We Collect”), which you can switch off by unsubscribing.

We may update these Terms and Privacy Policy periodically. When we make material changes, we will update the “Last updated” date at the top of this page, and we will notify you by email if you have an account.

A change to these terms never applies backwards to a purchase you have already made. Premium is a one-time purchase, so the terms in force at the moment you bought are the terms that govern what you bought, for the whole of your access period. Changes apply to purchases made after they are published.

Continued use of the free service after changes are published constitutes acceptance of the updated terms.

For any questions about these Terms or Privacy Policy, to exercise your data rights, or to report a concern: