DoMcq

Privacy policy

Effective 2026-10-16.

This says what DoMcq stores about you, where, why, for how long, who can see it, and what you can do about it. The short version: DoMcq keeps what it needs to run your account and your practice, on servers in the European Union; there is no advertising, nothing is sold or shared for marketing, and no AI ever receives your data from DoMcq. The controller of your data is me, Kamran Rashid, an individual in Lahore, Pakistan; contact [email protected].

What DoMcq stores

  • Your account: your email address, the name you gave (or the part of your email before the @ if you gave none), whether the email is confirmed, when the account was created, and the exam module you signed up from (so I can see which exams DoMcq is useful for).
  • A hash of your password (never the password itself), and the sessions that keep you signed in: a random token, when it expires, and the IP address and browser description of the request that created it.
  • Everything you import: the file exactly as you pasted or dropped it (so a problem can be traced back to it), and the questions, options, answers, explanations, rationales, topics and sources it contained, with every later version of a question you edit.
  • Your practice: every session, every answer, skip and flag, the time you spent, the scores, your notes, your bookmarks, and your custom exam profiles.
  • Your passes: for each purchase, what it is, when it starts and ends, its status (active, refunded, disputed, cancelled, expired), the email you bought with, Gumroad's sale id, product id and license key, and the purchase record Gumroad reports. For a pass given to you for free, a note saying so.
  • Short-lived tokens for confirmation, sign-in and password-reset links and for the account-deletion link, and rate-limit counters keyed by IP address, so sign-in forms cannot be hammered.

DoMcq does not store payment card details (Gumroad does, under its own policy), and does not build profiles of you for advertising.

Where it lives

  • The database and the web app run on DigitalOcean in Frankfurt, Germany (European Union). DigitalOcean keeps its own daily backups of the database for seven days.
  • Every week a copy of the whole database is written to DigitalOcean Spaces, also in Frankfurt, where DigitalOcean encrypts it at rest; the newest 12 copies are kept and older ones deleted, so any data lives in these copies for at most 12 weeks after it is deleted from the database.
  • Sign-in, confirmation, password-reset and account-deletion emails are sent through Resend from its Ireland (European Union) region. Resend keeps a log of each message (the address, the subject and whether it was delivered) for a limited time under its own policy.
  • Payments are taken by Gumroad, Inc. (United States), which is the merchant of record and a separate controller of what you give it at checkout: see Gumroad's privacy policy. Gumroad tells DoMcq about each sale, refund, dispute and membership change, and DoMcq checks each pass with Gumroad nightly.
  • I run DoMcq from Pakistan. The data stays on the servers above; when I look at it for support or to answer a request, I do so from Pakistan over an encrypted connection, from DigitalOcean's administration console. Pakistan has no European Union adequacy decision, so that access is a transfer to a country outside the EU, made for the running of your account and the handling of your requests.

DigitalOcean and Resend process data on my behalf under their standard data-processing terms. Nobody else receives your data: there are no advertising networks, no data brokers, no resale, and no AI service of any kind.

Why, and on what legal basis

Where the EU General Data Protection Regulation (GDPR) applies, each use of your data rests on one of its lawful bases (Article 6):

  • Running your account and your practice (storing your questions, sessions, notes, bookmarks and profiles; signing you in; sending the emails that sign-in and confirmation need): performance of the contract you have with DoMcq under the terms.
  • Recording your passes and checking them with Gumroad: performance of that contract.
  • Keeping a record of each purchase after a refund, after a pass ends, and after you delete your account (with your email replaced by a keyed hash): my legitimate interest in answering a refund request or a card dispute, which Gumroad can raise up to 180 days after a sale, and in keeping sales records.
  • Rate limits, session details (IP address, browser) and the weekly backups: my legitimate interest in keeping the service secure and recoverable.
  • Seeing which module people sign up from and buy for: my legitimate interest in understanding which exams DoMcq is useful for. Only counts are looked at.
  • Answering your emails: performance of the contract, or my legitimate interest in replying to you.

DoMcq does not rely on consent for any of the above, so there is nothing to withdraw; the rights below apply instead. Where another law applies to you, the same purposes stand.

How long

  • Your account and everything in it: until you delete the account or a set, or ask me to. Archiving a set keeps it; deleting a set deletes it.
  • Sessions: 30 days after they were last used, or when you sign out, or when you change your password (which signs you out everywhere).
  • Confirmation, sign-in, reset and deletion links: minutes to a day, then the token is discarded.
  • Rate-limit counters: a few minutes.
  • Purchase records: as long as your account exists, then as described under "Deleting your account". They are not deleted on a schedule.
  • Backups: DigitalOcean's daily backups for seven days; the weekly copies for 12 weeks.

Who can see it

Only me, Kamran Rashid, for support, to answer a request, or to keep the service running, through DigitalOcean's administration console. The web app itself connects with a restricted database user that cannot change the database's structure. DigitalOcean and Resend staff can reach their own systems under their terms and only as processors.

Your questions are shown to you and to nobody else: no other student, no exam body, no AI, no advertiser.

Cookies and browser storage

DoMcq sets one cookie, the session cookie that keeps you signed in (a random token, HttpOnly, valid for 30 days). There are no advertising or tracking cookies and no third-party cookies.

The browser's local storage holds one thing: which question you were on in a practice session, so a refresh brings you back to it. It never leaves your browser.

Analytics: DoMcq uses [analytics product] to count visits to its public pages and which module each visit was about. It is set up without cookies and shares nothing with anyone; it records the page, the module id, the country and the browser type, not who you are.

Your rights

If you are in the European Union or the United Kingdom, the GDPR gives you the rights below; I apply them to everyone, wherever you are.

  • Access and portability: the export on your account page gives you everything DoMcq holds about you in one zip (every set as a domcq/1 file, plus your sessions, answers, notes, bookmarks, profiles and account details as JSON). Each set can also be exported on its own.
  • Correction: you can change your questions from the review screen, your profiles from the profiles page, and your password from the sign-in page. To change the email on your account, write to me.
  • Deletion: delete your account from your account page (type the word, confirm the link I email you, press the button) or write to me; everything goes as described under "Deleting your account".
  • Objection and restriction: write to me and say what you object to; while I look at it I will not use the data for that purpose.
  • Complaint: you can complain to the data-protection authority of your own country. I would rather hear from you first at [email protected].

Requests are answered by email within a month. I may ask you to write from the address on your account, so that nobody else can take your data out or delete it.

Deleting your account

When you delete your account (from the account page, or by asking me by email), the account, its sessions and password hash, every set, imported file, question and version, every session and answer, every note, bookmark and custom exam profile, and any sign-in or reset tokens are deleted at once.

One thing stays: the record of each purchase, detached from the account, with your email replaced by a keyed hash (a code made from the email and a secret key only DoMcq holds, which nobody else can turn back into your email) and Gumroad's ids and the license key intact. It stays because a refund request or a card dispute can reach Gumroad up to 180 days after a sale, and DoMcq must be able to match it to the sale; after that it is a pseudonymous sales record. Passes given to you for free are simply deleted.

Deleted data leaves the weekly backup copies as they rotate: 12 copies are kept, so within 12 weeks. The backups are only ever used to restore the service after a failure, never to bring deleted data back.

Children

DoMcq is for people aged 16 and over, which covers the age of digital consent in every EU member state. Do not create an account if you are under 16. If I learn that an account belongs to someone under 16, I will delete it.

Security

Everything travels over HTTPS; passwords are stored only as scrypt hashes; the web app cannot alter the database's structure; the database is in a private network reachable only by the app; backups are encrypted at rest by DigitalOcean; secrets live in the hosting platform's settings, not in code. If a breach ever affects your data, I will tell you by email and the authorities as the law requires.

Changes to this policy

If this policy changes in a way that matters to you, I will email the address on your account before the change takes effect, and the changelog below will say what changed.

Contact

Kamran Rashid, 14-A, 1 NEW, Aibak Block, Garden Town, Lahore, Punjab 54000, Pakistan. Email: [email protected].

Changes

  • 2026-10-16: First version.