Privacy Policy

Applies to tentaguiden.se. Last updated: 2026-08-19.

1. Data controller

Bruno Wegelius (sole trader, Sweden)
Company registration number: 990925-5532
Postal address: Baldersvägen 56, 856 40 Sundsvall, Sweden
Email: hello@tentaguiden.se
Service: Tentaguiden (tentaguiden.se)

Tentaguiden is run as a personal side project aimed at medical students. We only process the data we actually need to deliver the service.

2. What we process

2.1 Using tentaguiden.se without an account

• We set no cookies of our own. We use localStorage in your browser for your theme choice, recently used content, a random device ID (key tg_device_id) and a flag showing you have accepted the study disclaimer (tg_verktyg_disclaimer_v1_accepted).
• Anonymous visit statistics via Plausible Analytics (self-hosted at stats.brunowegelius.com). Plausible is cookieless, anonymizes IPs on receipt and collects neither user IDs nor cross-site trails.
• Usage statistics for Tentaguiden+ — which parts of the sales surface and of Tentaguiden+ are used, for example that the offer was shown, that a button was clicked, how far down the information page you read and for how long. Events are tied together by a random ID stored in your browser's sessionStorage (key tg_sess), replaced on every visit and not linkable to you as a person. If you are signed in, the event is also linked to your account so we can see which parts lead to a purchase. We store no free text, no IP address and no browser fingerprint. The data is deleted no later than 12 months after collection. Legal basis: legitimate interest (Article 6(1)(f)) — understanding and improving the service.
• Anonymous quiz statistics (see 2.4) so we can measure which questions and topics are difficult. Tied to your random device ID, not to you as a person.
• GitHub Pages (which hosts the site) logs standard server requests, including IP, for security and ops. We do not have access to those logs.

2.2 When you create an account on tentaguiden.se

To sync your answers and settings across devices we need to tie an identity to you.

• Email. The address you register with. It is used to sign you in, for necessary account messages and for occasional emails about the service — see 3.1.
• User ID. A random UUID issued by Supabase.
• Your answers and progress. So they can sync across your devices.
• Settings. Theme choice and similar preferences.

2.3 Optional feedback

If you flag or submit feedback we store the message text. Adding your email is optional — if you skip it the message is anonymous.

2.4 Anonymous analytics

• Device ID. A random UUID (key tg_device_id in localStorage) generated locally in your browser. Not linked to you as a person.
• Plausible events. For example "opened an exam", "searched", "started a quiz". Anonymous and cookieless. Search boxes log a truncated lowercase version of your query (max 80 characters) but no IP or user link.
• Quiz answers (the question_attempts table in our database). When you answer a question or reveal the answer key we store: which exam and question, which option you chose, whether it was right or wrong, whether you revealed the key, and a timestamp. For free-text questions the text itself is never stored in the statistics — only its length and whether you self-graded. Tied to your random device ID when signed out and to your account when signed in.
• Browser, OS and language (via Plausible). For debugging.

We do not use third-party ad networks, Facebook Pixel, Google Analytics or similar.

2.5 What we never collect

• Location, contacts, photos, microphone, camera, health data.
• Browsing history outside tentaguiden.se.
• Advertising identifiers (IDFA, GAID).
• Patient data. The service is not designed to store or transmit it.

2.6 When you buy Tentaguiden+

• Purchase data. Which term you unlocked, the amount, the date and the end date of your access. Needed to give you what you paid for, and for our accounts.
• Payment via Stripe. Card and payment details are handled by the payment provider Stripe and never reach our systems. Stripe is an independent controller for the payment itself.
• Access log for paid content. When paid content is fetched we log the time, the account, a pseudonymised IP hash and coarse client information. The log is used only to detect account sharing and systematic downloading.
• Documentation for a failed-exam refund. If you request one, we process the documents you send (a Ladok transcript and a verifiable Ladok certificate) solely to assess the request. They are deleted once the assessment is done; the decision and the credit note are kept as required by accounting law.

3. Purpose and legal basis

3.1 Emails to account holders

We use your email address for two things, and nothing else:

• Necessary account messages. Verification, password resets, outages, security notices and material changes to the terms or this policy. These are part of the service itself and cannot be opted out of while you have an account.
• Occasional emails about the service. At most a couple of times a year — for example a feedback request ahead of a new term. The basis is legitimate interest: we need to know what works and what does not in order to improve Tentaguiden, and as an existing user you can reasonably expect us to ask. Every such email contains an opt-out link.

We send no advertising, never sell your address and never disclose it to third parties for marketing. You can opt out at any time via the link in the email or by writing to hello@tentaguiden.se — we then record only the fact that you opted out, so you do not receive any more.

4. Retention

• Account data: as long as your account is active. When you delete it, your email, user ID and settings are removed. Your rows in question_attempts are cascade-deleted at the same time.
• Feedback: kept as long as it is useful, at most 24 months.
• Your opt-out from mailings: kept for as long as you have an account. We need the record precisely in order not to email you.
• Quiz answers (question_attempts): raw rows at most 18 months. They are then aggregated into anonymized per-question difficulty statistics with no user or device link.
• Plausible events: aggregated continuously and kept for at most 13 months in raw form.
• Purchase and receipt records: 7 years after the end of the financial year, as required by the Swedish Accounting Act. They are not deleted when you delete your account, because the law requires them to be kept.
• Access logs for paid content: deleted or anonymised no later than 12 months after collection.
• Documentation for a failed-exam refund: deleted once the assessment is done. The decision and the credit note are kept under the Accounting Act.

5. Sharing

We never sell your data. We use the following sub-processors to run the service:

We only share data with authorities when required by law.

6. Transfers outside the EU/EEA

The Supabase database for osceumea is hosted in the EU. Some vendors (GitHub, Supabase as a company) are US-based, so data may still move outside the EU/EEA. We rely on:

• EU Standard Contractual Clauses (SCC) via the Supabase DPA.
• EU-US Data Privacy Framework for certified vendors.

7. Security

• All traffic uses TLS.
• Passwords are stored as cryptographic hashes only.
• Database access is limited to Bruno Wegelius and protected by MFA.
• Payments are handled by Stripe — no card numbers pass through our systems.

8. Your rights under GDPR

• Be informed about how your data is processed.
• Access a copy of the data we hold about you.
• Rectify incorrect data.
• Erase your data — email us and we delete your account and associated data.
• Data portability — get your data in a machine-readable format.
• Object to processing based on legitimate interest.
• Opt out of emails about the service, via the link in the email or by contacting us. Necessary account messages continue while you have an account.
• Withdraw consent you have given.

Send requests to hello@tentaguiden.se. We respond within 30 days.

9. Children

Tentaguiden is aimed at medical students and is not intended for children under 13. We do not knowingly collect data from children under 13. Parents who suspect their child has provided data should contact us so we can delete it.

10. Cookies and local storage

Tentaguiden sets no cookies. We use localStorage for theme, recently used content, the random device ID (tg_device_id) and the study-disclaimer flag (tg_verktyg_disclaimer_v1_accepted). Of these, only the device ID and your quiz answers are sent to our servers (see 2.4). You can clear the storage via your browser settings at any time.

11. Changes

When we make meaningful changes we update the date at the bottom and announce it on tentaguiden.se. Small wording changes are made silently.

12. Contact and complaints

Reach us at hello@tentaguiden.se.

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY):

Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
imy.se · imy@imy.se

Last updated: 2026-08-19. Tentaguiden is operated by Bruno Wegelius (hello@tentaguiden.se). The service is not affiliated with Umeå University.