Privacy Policy

SQE Cracker is operated by SQECRACKER.COM, trading as SQE Cracker (sqecracker.com). We are the data controller for all personal data collected through this platform.

Any questions about this policy can be sent to hello@sqecracker.com and we will respond within five business days.

We collect only what is strictly necessary to run your account and deliver your study experience.

• Name and email address when you register
• Your password stored in hashed, encrypted form - we cannot see it
• Study activity such as quiz scores, mock exam results, topics completed, and time spent studying
• Payment records processed entirely by Stripe - we never see or store your card details
• IP address and device type for security and fraud prevention, and for ad measurement if you accept optional cookies
• Support messages and account emails you send to us
• Referral codes and qualifying purchase records; if you request a referral payout, your account name, sort code and bank account number
• Mockathon waitlist details if you join: first name, email, day choice, city, and how you heard about it if you tell us. If you choose to send it, proof that you are registered for the SQE1 in January 2027 (a PDF or a screenshot of your registration email)
• Official SQE1 result evidence if you submit a Pass Guarantee claim

Guided coaching data. If you apply to coach or buy Guided coaching, we also process the coach profile and accepted coach terms, the assigned coaching relationship and its assignment history, shared plans, comments, feedback and private resources. Candidates choose which aggregate journey, practice, mock, or weekly-activity summaries to share. Personal notes and AI conversations are not shared with a coach through the coaching workspace.

Coach applications. If you apply to coach, we ask for your CV, the month you passed SQE1, the languages you speak, your country, time zone and weekly availability, and optionally your LinkedIn profile. We collect these to check that you have passed SQE1, that you are a good fit to coach, and that we can match you with candidates in a workable time zone and language. You agree to this on the application form. Your CV and pass details are visible only to authorised SQE Cracker staff and are never shown on your public coach profile. If your application is unsuccessful we delete your CV within a week. If you are approved we keep it while you coach and for six months after you stop, then delete it. You can ask us to delete it sooner.

Referral bank details. If you earn a referral reward, we email you a private payout link. On that page you submit the account name, sort code, and account number for a UK current account so we can pay you the £20 reward. We use those details only to arrange and evidence that manual transfer. They are not used for marketing. Advertising pixels are disabled on private payout pages. Full bank details are not shown in ordinary staff dashboards; authorised staff retrieve them only when making a payout. You can ask us to delete stored bank details at any time by emailing hello@sqecracker.com.

Mockathon waitlist. If you join the waitlist, we store your first name, email address, which day or days you want (Saturday 19 December 2026 and Saturday 2 January 2027) and the city you are based in. If you choose to tell us, we also store how you heard about Mockathon. We store whether you agreed to emails about Mockathon, whether you opted in to other SQE Cracker updates, and the time you joined. If you accept marketing cookies, we also store the referring page and campaign parameters to understand which links led people to the waitlist. We use your waitlist details to email you before tickets open, to plan the day, and to tell you if Mockathon changes or is cancelled. A place on the list is not a ticket. You can ask us to delete this by emailing hello@sqecracker.com.

Proof of your SQE1 registration (optional). Mockathon is a rehearsal for people who are sitting the SQE1 in January 2027. When you join, you can send proof that you are registered: the confirmation as a PDF, or a screenshot of the email. You do not have to. If you skip it, you still join, and we may ask you for it later. You can also hide details we do not need, such as your address, before you send it. If you send it, you tick a separate box to agree to us keeping it, and we record the time we receive your file and agreement. The box is never ticked for you.

We use it for one thing: checking that you are registered for the January 2027 sitting, so that Mockathon places go to genuine SQE1 candidates. We rely on your consent, given by sending the file and ticking the box. We keep the file in private storage that only authorised SQE Cracker staff can open. We do not share it, use it for marketing or use it for anything else. Our storage provider (Supabase) holds it for us as a processor. It may contain personal details, so only send it if you are comfortable doing so.

We delete it if you ask us to, at any time, by emailing hello@sqecracker.com, and you stay on the waitlist. We also delete every proof once the January 2027 SQE1 sittings are over. You can withdraw your consent whenever you like, which does not affect anything done before.

We do not use analytics tools. We use advertising measurement cookies only if you accept optional cookies, and you can reject them and still sign up.

• To create and manage your account
• To deliver study content, mock exams, and the AI tutor
• To process subscription payments through Stripe
• To send transactional emails such as password resets, payment receipts, and mock exam result reports (score, subject breakdown, session duration, and time spent per subject — not question content)
• To send occasional study tip emails to existing subscribers (you can unsubscribe at any time)
• To keep the platform secure and prevent fraud
• To attribute referrals, check qualifying payments and reversals, and let authorised staff arrange manual referral payouts
• To run the Mockathon waitlist, email you about it (including if it changes or is cancelled) when you have asked us to, and send other SQE Cracker updates only if you opted in
• To check, if you send proof, that you are registered for the January 2027 SQE1, so that Mockathon places go to genuine SQE1 candidates
• To measure how well our Reddit and ChatGPT ads work, only if you accept optional cookies

We will never sell your personal data. We share data with processors only where needed to run the service. If you accept optional cookies, Reddit and OpenAI receive ad measurement data about your visit.

We use trusted third-party services to operate the platform and choose providers with appropriate privacy and contractual safeguards for their role.

An approved coach can see only the candidate data available inside an active assigned coaching relationship: shared plans, feedback, resources and the progress categories the candidate has selected. On reassignment, the replacement coach receives the existing shared panel history, the previous coach loses access, and progress sharing resets so the candidate can make a fresh choice. Ending the relationship removes coach access while leaving the candidate's history read-only. Coaches do not receive personal AI conversations, private notes, payment-card data or another candidate's records.

Primary app data is hosted through Supabase. Some providers may process data in the UK, EEA, or United States under appropriate safeguards. Provider privacy policies linked above explain their current hosting and transfer arrangements.

• Your account and study data is kept while your account is active, plus up to 12 months after you close it
• Pass Guarantee evidence is kept only as long as needed to verify and audit the claim
• Payment records are kept for 7 years as required by HMRC
• Referral bank details (account name, sort code, and account number) are kept only to arrange and evidence the referral payout. We purge them after payment is completed, or earlier if you ask us to erase them. Purging bank details also invalidates any private payout link for that referral code
• Mockathon registration proof is kept in private storage only until the January 2027 SQE1 sittings are over, then deleted. If you ask us to delete it sooner, we do, and you stay on the waitlist
• Coach application CVs and pass details are deleted within a week if the application is unsuccessful, or six months after an approved coach stops coaching. We delete them sooner on request
• Security logs are kept for up to 12 months
• When your data is no longer needed, it is permanently and securely deleted

Coaching relationship history, accepted terms and shared panel records may be retained after a relationship ends where needed for contract, dispute and legal obligations. Access to private resources and selected progress is removed when the relationship is revoked; copies already downloaded by an authorised participant cannot be recalled.

Under the UK GDPR and the Data (Use and Access) Act 2025, you have the following rights. To exercise any of them, email us at hello@sqecracker.com and we will respond within one month.

Necessary cookies and storage always run. They keep you signed in, recover your checkout if it is interrupted, protect against fraud, remember your light or dark appearance choice, and remember this cookie choice.

With marketing consent, we keep first and latest campaign labels and an OpenAI-provided advert click reference in browser storage for up to 30 days, and link these to authenticated signup and checkout records to understand acquisition. We do not put your email, exam documents, study answers or scores in this attribution payload. Withdrawing consent removes the browser attribution store and stops future capture.

Marketing cookies are off until you accept them. Advertising pixels are also disabled on private referral payout pages. They cover the Reddit Ads and ChatGPT Ads conversion pixels only, which measure whether an advert led to a signup. We do not use analytics tools and we do not build advertising profiles ourselves.

If you reject optional cookies you can still create a free account, sign in, and pay. We store your choice for 12 months and then ask again. You can change it at any time with the Cookie settings control on this site. If you turn marketing off after having it on, we stop sending events and delete the pixel cookies set on this site, though we cannot delete anything Reddit or OpenAI already stored on their own domains.

Two other third parties are involved in normal use, and neither is an advertising tracker: the AI tutor loads OpenAI ChatKit inside your signed-in study tools, and Google Fonts serves our typefaces. The cookie policy lists every cookie and storage key, who sets it, why, and how long it lasts.