Privacy Policy

Last updated: 17 October 2026

Vera (“Vera”, “we”, “us”) is an online practice platform for AWS certification exams. This policy explains what information we collect when you use Vera, why we collect it, and the choices you have. We collect only what we need to run practice exams and show you your progress.

1. Information we collect

If you practise without an account

A random session identifier, stored in your browser’s local storage, so your exams and answers can be saved and resumed. It is not linked to your name or email.
The exams you take, the answers you select, questions you flag, scores and timestamps.

If you create an account

Your email address and, if you give one, your name.
Your password, stored only as a one-way cryptographic hash. We cannot see or recover your password.
Your exam history and progress, as above, so it is available on any device you sign in from.

If you sign in with Google or GitHub

From Google: your Google account ID, email address, whether that email is verified, and your name. We request only the openid, email and profile permissions.
From GitHub: your GitHub user ID, username, display name, and your verified email address. We request read-only access to your profile and email addresses.
We never receive your Google or GitHub password, and we do not store the access token the provider gives us after sign-in is complete.

Technical information

Our servers log basic request information (such as IP address, time, and the page or API address requested) for security, rate limiting and troubleshooting. These logs are kept for a short period by our hosting provider.
We do not use advertising or analytics cookies, and we do not track you across other websites.

2. How we use your information

To run practice exams, score them, and show your results, explanations and progress by domain.
To create and secure your account, including signing you in and sending password reset emails.
To prevent abuse, such as excessive automated requests or attempts to guess passwords.
To improve the question bank, for example by seeing which questions are often answered incorrectly.

We do not sell your personal information, and we do not use it for advertising.

3. Google user data

Information we receive from Google is used only to create your Vera account, sign you in, and display your name and email in Vera. We do not share it with anyone except the service providers listed below that host Vera, we do not use it for advertising, and we do not use it to train artificial intelligence models. Vera’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Who we share information with

We use a small number of service providers to operate Vera. They process data only on our instructions:

Render: hosts the Vera website, API and database.
Resend: sends account emails such as password reset links.
Cloudflare: provides DNS for our domain.
Google and GitHub: only if you choose to sign in with them.

We may also disclose information if required by law, or to protect the rights, safety or security of Vera, our users or others. These providers may store data outside your country; we rely on their standard contractual and security commitments when they do.

5. How long we keep information

Account information and exam history: for as long as your account exists.
Guest exam history: for as long as it remains useful, and it may be removed after a long period without use.
Password reset links expire after 1 hour. Signed-in sessions expire after 60 days.

6. Security

All traffic to Vera is encrypted with HTTPS. Passwords are hashed, sign-in tokens are stored only as hashes, and access to the database is restricted. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach where the law requires it.

7. Your choices and rights

Depending on where you live, including under the Nigeria Data Protection Act 2023 and, where applicable, the EU/UK GDPR, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict certain processing. To make a request, including to delete your account and all associated exam history, email privacy@skillcred.com.ng from the address on your account. We will respond within 30 days.

You can also remove Vera’s access from your Google account (Security → Third-party apps) or GitHub account (Settings → Applications) at any time.

8. Children

Vera is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.

9. Changes to this policy

We may update this policy as Vera changes. We will change the “last updated” date above and, for significant changes, tell signed-in users in the app or by email.

10. Contact

Questions about privacy or your data: privacy@skillcred.com.ng.