Privacy Policy
Last updated: August 23, 2026IELTS Writing Checker processes information needed to provide AI-assisted IELTS writing feedback, manage accounts, handle subscriptions, and keep the service reliable.
Information we collect
We may process the information you provide or generate while using the service, including writing prompts, essay text, selected task type, generated feedback, saved review history, subscription status, your account's last activity time, support requests, basic device or browser information, and technical logs needed to operate and secure the service.
Account and authentication data
You may sign in through Google or with a one-time code sent to your email address. WorkOS processes the authentication flow for us. When you use Google, the openid, email, and profile scopes may be requested. We may store a WorkOS user identifier, a linked Google account identifier for an existing account, your verified email address, display name, profile picture, authentication method, and session information so we can create or link your account, keep you signed in, show saved reviews, and provide support. We do not sell authentication data or use it for advertising.
Submitted writing and AI feedback
Your prompts, essays, and uploaded Task 1 images may be sent to third-party AI providers only to generate the feedback you request. Generated scores, comments, and suggestions are stored with your submission so you can reopen saved reviews; uploaded Task 1 images are processed for the requested review and are not stored in saved review history. Do not submit highly sensitive personal, financial, medical, or confidential information.
Public essay samples
Submitted prompts, essays, estimated scores, and generated feedback may be published as anonymous IELTS writing samples unless we mark a submission private, remove it, or are asked to hide it. Public samples do not show your email address, authentication provider identifiers, billing information, or other account details. Please do not submit personal, confidential, copyrighted, or sensitive material that should not appear publicly.
Payments and subscriptions
Payments are processed by our payment provider or its payment partners. We do not store full payment card numbers. We may receive and store payment-related identifiers, such as customer ID, subscription ID, product ID, subscription status, renewal or cancellation status, and access expiry date, so we can manage paid review capacity and respond to billing support requests.
Email marketing consent
If you select the email marketing checkbox while creating a new account, we record the consent time, checkbox version, and language. If no purchase is recorded, we may send one marketing recall email: 8 hours after your latest checkout attempt, 24 hours after your latest locked private writing report when no checkout attempt exists, or 48 hours after account creation when neither later activity exists. We use your email address, display name when available, language, recent checkout activity, and the identifier of the relevant saved report to select the message and destination. The email includes an unsubscribe link managed by Resend. The contact is deleted from Resend 30 days after the email, while we retain the local consent and one-time delivery record needed to honour the lifetime limit. A returning sign-in does not create another enrollment.
Cookies and local storage
We use essential cookies for sign-in sessions and OAuth security state, including PKCE verification. Google Analytics uses cookies and similar technologies for site measurement. We use local or session storage to remember your language preference, preserve a draft during sign-in, return you to a report after checkout, limit how often we update your account's last activity time, and maintain an analytics session.
Analytics and signup attribution
Google Analytics is used on eligible visits to our production website and may collect page views, landing pages, language, writing task type, sample-page identifiers, account sign-up and review-funnel events, device or browser information, approximate location, and first-purchase value. We keep first-party records of subscription button clicks, including the time, selected plan, page path, button placement, a pseudonymous browser token, and the linked account ID when available. The browser token is retained for up to 30 days so a click made before sign-in can be associated with the same account after authentication. We derive a pseudonymous rate-limit key from network information to protect this click endpoint, do not store the raw IP address in the click table, and remove click records after 180 days. If you create a new account, we may also save the source and landing-page path from that signup session with your account so we can understand which channel led to registration. For this account attribution, we save a UTM source or external referrer hostname—not a full referrer URL—and a path without its query string or fragment. We do not send essay text, writing prompts, uploaded images, names, email addresses, or our internal user identifiers to Google Analytics.
Trustpilot review link
The site footer contains an external link to our Trustpilot review page. Your browser connects to Trustpilot only after you follow that link. We do not send essay text, writing prompts, uploaded images, account details, or submission data to Trustpilot. Trustpilot's own terms and privacy policy apply when you use its services.
How we use information
We use information to provide scoring, inline comments, revision suggestions, saved review history, subscription access, quota enforcement, support, security, abuse prevention, debugging, and service analytics. We do not sell submitted essays or personal information.
Service providers
We use third-party service providers, including WorkOS for authentication and Resend for consent-based email delivery, as well as providers for hosting, AI feedback generation, payments, infrastructure, and Google Analytics measurement. These providers process information only as needed to provide their services to us or as required by law.
Retention, access, and deletion
We keep account information, submitted content, generated feedback, billing records, and logs for as long as reasonably needed to provide the service, maintain security, debug failures, comply with legal obligations, resolve disputes, or support features you request. You may request access, correction, deletion, or account closure by contacting [email protected]. Some billing, security, or legal records may be retained where required or permitted by law.
Security
We use reasonable technical and organisational measures to protect submitted content, but no internet service can guarantee absolute security.
Children and sensitive information
The service is not directed to children under 13. If you are under the age of digital consent in your location, use the service only with permission from a parent or guardian. Please do not submit sensitive personal data, confidential exam materials, or content you are not allowed to share.
Contact and English version
Questions or privacy requests can be sent to [email protected]. This Privacy Policy is provided in English, and the English version controls.