Your privacy.

Last updated: July 2026

This Privacy Policy explains how Citizen Pass ("Citizen Pass", "we", "us") collects, uses, and protects your information when you use the website at citizen-pass.com (the "Site"). Citizen Pass is operated by Oddly Sunny LLC, a limited liability company registered in New Jersey, United States. Oddly Sunny LLC is the data controller for the Site.

This policy covers the website only. The Citizen Pass mobile apps have their own privacy policies, shown inside each app and on its app store listing.

Citizen Pass is an independent study and practice tool. We are not a government agency, and we are not affiliated with, endorsed by, or associated with USCIS, the UK Home Office, Immigration, Refugees and Citizenship Canada, the Australian Department of Home Affairs, or any other government body. The Site is for educational and practice purposes only and does not collect any government, immigration, or application data.

The short version

• You do not need an account to study. Your progress and Readiness Score are stored in your browser, on your device, not on our servers.
• We use analytics only with your consent, to understand what helps people prepare.
• An account is created only when you buy a membership. We process your email and (through Stripe) your payment. We never see or store your card number.
• We do not sell your personal information.

Information we collect

Information stored on your device. Your study progress, answered questions, flags, completed topics, settings, chosen test version, and IQ Readiness Score are saved in your browser using local storage. This stays on your device and is not transmitted to us. You can clear it at any time through your browser.

Account information. An account is created for you when you buy a membership: we collect the email address you give Stripe at checkout so we can unlock your membership and send you a one-time sign-in link. We use passwordless sign-in, so there is no password for us to store. There is no way to create an account without a purchase.

Payment information. Payments are processed by Stripe. We do not receive or store your full card details. We retain a record of your purchase, such as the amount, currency, date, product, and payment status, to provide and support your membership.

Analytics and cookies. With your consent, we use Google Analytics to understand how the Site is used (for example, which pages are visited and on what kind of device). Analytics may set cookies and collect technical data such as a device or browser identifier, general (city-level) location inferred from your IP address, and pages viewed. Where required, analytics stays disabled until you accept, and you can change or withdraw your choice at any time on the Cookie settings page (linked in the footer). Where analytics is on by default, you can opt out the same way. We also honor the Global Privacy Control (GPC) browser signal as an opt-out.

Location used for the cookie banner. To decide which cookie banner to show you, we read the approximate country and region that Cloudflare derives from your IP address. We use it for that decision only. We do not store it.

Communications. If you email us or use our contact form, we keep your message and contact details to respond. A message sent through the contact form reaches us as an email that includes your name, your email address, your message, the page you were on, your browser's user agent, and the approximate country derived from your IP address, so we can reproduce the problem you are reporting. Sign-in and receipt emails are sent through Resend.

Server and security logs. Our hosting and content-delivery providers (Google Firebase Hosting and Google Cloud, fronted by Cloudflare) automatically record standard technical logs, such as IP address, request time, and user agent, to operate the Site securely and prevent abuse.

How we use information

• To provide the Site and your study tools, and to remember your progress on your device.
• To process purchases, unlock memberships, and send sign-in links and receipts.
• To understand and improve how people prepare, using consented analytics.
• To respond to your questions and support requests.
• To keep the Site secure, prevent fraud and abuse, and meet our legal obligations.

Legal bases (EEA and UK)

Where the EU or UK GDPR applies, we rely on: your consent (for analytics cookies and marketing emails, if any); performance of a contract (to provide a membership you purchase); and our legitimate interests (to keep the Site secure and to improve it), balanced against your rights.

Sharing and service providers

We do not sell your personal information. We share information only with service providers who process it on our behalf, under contract, to run the Site:

• Google (Analytics, Firebase, and Cloud) for analytics, hosting, authentication, and database.
• Stripe for payment processing.
• Resend for transactional email (sign-in links and receipts).
• Cloudflare for content delivery and security.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the Site.

International transfers

We are based in the United States and our providers may process data in the United States and other countries. Where personal data is transferred from the EEA or UK, we rely on appropriate safeguards, such as the standard contractual clauses offered by our providers.

Data retention

Study data stays on your device until you clear it. If you buy Pro, we keep your account (your email address) and your purchase record for as long as you have an account with us, and after that for as long as we need them for legal, tax, and support reasons. We do not delete accounts automatically for inactivity. You can ask us to delete your account and purchase record at any time at [email protected], and we will, unless we are required to keep a record of the transaction. Stripe keeps its own record of payments under its retention policy. In Google Analytics, event-level data is deleted after 14 months, which is the retention window we have set. Aggregated reports, which cannot identify you, may be kept for longer. Analytics cookies expire on the schedule in the table above, or sooner if you clear them.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in California, you may request access to or deletion of your personal information and are entitled not to receive discriminatory treatment for exercising these rights. To exercise any right, email us at [email protected]. You can clear device-stored study data yourself at any time through your browser.

Children

The Site is intended for adults preparing for a citizenship test and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

Security

We use reasonable technical and organizational measures to protect information, including encryption in transit and reputable processors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and significant changes will be made prominent on the Site.

Contact

Oddly Sunny LLC, New Jersey, United States. For any privacy question or request, email [email protected].