Privacy notice
Who we are and what this covers
William Ambery, a sole trader operating as Wamberry ("Wamberry", "we") provides practice for the reasoning tests used in graduate recruitment. This notice explains what we do with information about you when you use the platform. It covers the practice application and the worked-example pages, and nothing else.
We are the controller of this information. You can reach us at contact@wamberry.com; a postal address is available on request.
What we collect, and why
When you practise without an account. We keep a random identifier in a cookie and in your browser's local storage so that your rating and answer history survive a page reload. It contains no information about you beyond that identifier. We use it because the platform cannot adapt difficulty without knowing which answers were yours.
When you create an account. Accounts use passkeys: your device (for example Face ID, a fingerprint or a security key) creates a key pair and sends us only the public half, together with a random account identifier and the name you choose to show in Match Mode. We never receive your biometrics, a password or your email address. We need these to let you return to your own history.
As you practise. Which questions you were shown, which option you chose, whether it was correct, when it happened, how long the question was on screen, and the ratings that result — yours and each question's. This is the product: adaptive difficulty, weakness identification and percentile benchmarking are all computed from it, and none of them can work without it.
We also keep a daily summary of your own practice — answers, correct answers, time spent and where your rating finished, per day and per category — so that your progress page can show you how you are moving rather than only where you stand. The time figure is measured in your browser and capped at five minutes per question, so a tab left open does not turn into hours of practice. This summary is yours alone: it is shown to nobody else, it is included in the data you can download, and it is destroyed when you erase your data.
If you pay for a premium subscription. Our payment provider handles your card details and the email address you give at checkout; we never see or store your card. We keep your Stripe customer and subscription references against your account, which plan you hold and until when, so that we can unlock premium features. Stripe keeps the payment records that tax law requires.
Technical information. Our hosting platform logs requests, including IP addresses, for security and to diagnose faults.
Free-tier limits. To stop the free allowance being claimed again by clearing browser data, we keep a salted, one-way hash of your network (IP) address with a count of free questions answered from it, for 8 days. We never store the address itself, and the hash cannot be turned back into it. This does not apply to Premium accounts.
We do not collect personality data. We do not run personality questionnaires at all, by design.
Our legal grounds
- Providing the practice platform and your account: performance of our contract with you.
- Keeping the platform secure and working: our legitimate interests in running a service that is not abused or broken. We have weighed this against your interests and limited what we log accordingly. The same legitimate interest covers the hashed network address we keep to enforce free-tier limits.
- Marketing email: your consent, which you can withdraw at any time, and which we will never treat as a condition of using the free tier.
- Keeping payment records: our legal obligation.
An important note about your rating
Your rating is a number we calculate about your reasoning performance, and your percentile compares you with other users. That is a judgement about you, so we treat it carefully. It is used only to choose which questions to show you and to show you your own progress. We do not sell it, we do not share it with employers, and we do not use it to make any decision about you other than which question comes next. No employer or recruiter receives any information about an identifiable user from us.
Result cards you choose to share
If you ask us for a shareable result card, we create a picture of your rating, your percentile and your category counts, and put it at a web address made of random characters. Anyone who has that address can see the card, so treat it like a link you have chosen to publish. The card contains no name, no email address and nothing that identifies you to someone who does not already know it is yours. Nothing is created until you ask, and you can revoke a card at any time, after which the address stops working.
Who we share information with
Only the suppliers who make the service work: our hosting provider, our payment provider, and our email provider. Each acts on our instructions under a written agreement and may not use your information for their own purposes. We will name them on request.
We share information with anyone else only where the law requires it.
How long we keep it
- Your account and answer history: while your account exists. Delete your account and we delete them, apart from what we must keep for tax records.
- Visitor practice history without an account: deleted after 12 months of inactivity.
- Payment records: as long as tax law requires, currently six years in the UK.
- Server logs: a short retention set by our hosting provider.
- Hashed network address for free-tier limits: 8 days.
Your rights
You can ask us for a copy of your information, ask us to correct it, ask us to delete it, ask us to restrict or stop certain uses, object to processing based on legitimate interests, and ask for your data in a portable form. Write to contact@wamberry.com and we will respond within one month.
You can complain to the Information Commissioner's Office in the United Kingdom, or to your national data protection authority, and you do not need to raise it with us first — though we would rather you did, so we can fix it.
Cookies
We use one cookie to keep your practice session yours, and if you have an account, one to keep you signed in. Both are strictly necessary for the service and neither tracks you elsewhere. We do not use advertising or analytics cookies. If that ever changes we will ask for your consent first, properly, and the service will work if you say no. We also keep an aggregate, cookie-free count of page views to understand traffic; any hashed visitor token used for that count is deleted within two days.
International transfers
Our payment provider, Stripe, and our hosting providers may process information outside the UK and the EEA, including in the United States. Where they do, the transfer relies on an adequacy decision (such as the EU–US Data Privacy Framework and the UK extension to it) or on standard contractual clauses. You can ask us for details of the safeguards used.
Feedback and question reports
If you report a problem with a question, or send us general feedback, we store only what you type, the question's id where relevant, the page you were on, and your pseudonymous visitor or account id. We use it solely to fix questions and bugs, and keep it for 12 months. Sending feedback does not require an email address.
Children
The platform is intended for users aged 16 and over. Paid subscriptions are for adults aged 18 and over.
Changes
If we change how we use your information we will update this page and, where the change matters, show a notice on the site before it takes effect.
Last updated: 23 September 2026