Your privacy.
Last updated: June 2026
This Privacy Policy explains how Citizen Pass ("Citizen Pass", "we", "us") collects, uses, and protects your information when you use the website at citizen-pass.com (the "Site"). Citizen Pass is operated by Oddly Sunny LLC, a limited liability company registered in New Jersey, United States. Oddly Sunny LLC is the data controller for the Site.
This policy covers the website only. The Citizen Pass mobile apps have their own privacy policies, shown inside each app and on its app store listing.
The short version
- You do not need an account to study. Your progress and Readiness Score are stored in your browser, on your device, not on our servers.
- We use analytics only with your consent, to understand what helps people prepare.
- If you create an account or buy a membership, we process your email and (through Stripe) your payment. We never see or store your card number.
- We do not sell your personal information.
Information we collect
Information stored on your device. Your study progress, answered questions, flags, completed topics, settings, chosen test version, and IQ Readiness Score are saved in your browser using local storage. This stays on your device and is not transmitted to us. You can clear it at any time through your browser.
Account information. If you choose to create an account or make a purchase, we collect your email address so we can send you a one-time sign-in link and unlock your membership. We use passwordless sign-in, so there is no password for us to store.
Payment information. Payments are processed by Stripe. We do not receive or store your full card details. We retain a record of your purchase, such as the amount, currency, date, product, and payment status, to provide and support your membership.
Analytics and cookies. With your consent, we use Google Analytics to understand how the Site is used (for example, which pages are visited and on what kind of device). Analytics may set cookies and collect technical data such as a device or browser identifier, general (city-level) location inferred from your IP address, and pages viewed. Where required, analytics stays disabled until you accept, and you can change your choice through the cookie settings.
Communications. If you email us, we keep your message and contact details to respond. Sign-in and receipt emails are sent through Resend.
Server and security logs. Our hosting and content-delivery providers (Google Firebase Hosting and Google Cloud, fronted by Cloudflare) automatically record standard technical logs, such as IP address, request time, and user agent, to operate the Site securely and prevent abuse.
How we use information
- To provide the Site and your study tools, and to remember your progress on your device.
- To process purchases, unlock memberships, and send sign-in links and receipts.
- To understand and improve how people prepare, using consented analytics.
- To respond to your questions and support requests.
- To keep the Site secure, prevent fraud and abuse, and meet our legal obligations.
Legal bases (EEA and UK)
Where the EU or UK GDPR applies, we rely on: your consent (for analytics cookies and marketing emails, if any); performance of a contract (to provide a membership you purchase); and our legitimate interests (to keep the Site secure and to improve it), balanced against your rights.
Sharing and service providers
We do not sell your personal information. We share information only with service providers who process it on our behalf, under contract, to run the Site:
- Google (Analytics, Firebase, and Cloud) for analytics, hosting, authentication, and database.
- Stripe for payment processing.
- Resend for transactional email (sign-in links and receipts).
- Cloudflare for content delivery and security.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the Site.
International transfers
We are based in the United States and our providers may process data in the United States and other countries. Where personal data is transferred from the EEA or UK, we rely on appropriate safeguards, such as the standard contractual clauses offered by our providers.
Data retention
Device data remains until you clear it. Account and purchase records are kept for as long as your account is active and as needed to meet legal, accounting, and support obligations, then deleted or anonymised. Analytics data is retained according to our analytics provider's settings.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in California, you may request access to or deletion of your personal information and are entitled not to receive discriminatory treatment for exercising these rights. To exercise any right, email us at [email protected]. You can clear device-stored study data yourself at any time through your browser.
Children
The Site is intended for adults preparing for a citizenship test and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.
Security
We use reasonable technical and organisational measures to protect information, including encryption in transit and reputable processors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and significant changes will be made prominent on the Site.
Contact
Oddly Sunny LLC, New Jersey, United States. For any privacy question or request, email [email protected].