Your personal data

What these controls cover

LGTM processes account profile and linked sign-in information, practice answers, feedback and session timestamps to provide personal interview practice. Sign-in records can contain IP addresses and browser details. Authentication and signed guest cookies support access control; a browser storage counter tracks guest usage.

Service and security records contain request times, random request references, route categories, response status, duration and bounded failure codes. These application records exclude passwords, cookies, access tokens, email addresses, raw IP addresses, browser identifiers, URL queries and answer contents. Hosting and authentication providers may maintain separate records under the operator's policies.

Restricted operational reports count practice sessions started, answers submitted, evaluation outcomes and sessions left unsubmitted after 24 hours. These are aggregate service metrics, not individual applicant profiles or proof that a person has left the service. This reporting adds no analytics cookies, fingerprinting or session replay.

Scenario evaluation sends your submitted answer and the relevant exercise context to OpenAI to generate feedback. Multiple-choice questions are scored by a deterministic answer check without sending that answer for AI evaluation. Do not submit secrets, confidential employer material or other people's personal data.

Deletion removes records from the application database. It does not confirm deletion from AI providers, operational logs, backups, or exports you downloaded.

Account and guest controls are separate. Guest controls cover only records for which this browser still has valid signed cookies. Close other practice tabs to discard unsent answers held in memory. Your browser theme, usage counter and unrelated browser data remain available. Downloaded copies must be removed separately.

The retention tool requires an operator to approve retention periods and activate deletion. An automatic deletion schedule is not guaranteed by this page. Missing guest cookies do not mean that a stored record has been deleted.

Self-service exports exclude credentials, private assessment rubrics and other people's records. Provider and infrastructure records, backup handling, retention exceptions and rights requests requiring identity verification need the service operator's review.

The operator has not configured a privacy contact for requests outside these controls. This contact and the applicable retention and request-handling policies must be provided before public use.

These controls do not establish permission to use practice records for employment decisions or model training. Read responsible use and AI feedback limitations.