Privacy Policy
Effective date: November 1, 2026 · Last updated: November 1, 2026
This policy explains what ServSafe Practice Exam collects, why, and the choices you have.
An account is optional for free practice. If you make one, we keep your email address, your mock exam results and, if you subscribe, a record of the payment. Payments go through PayPal, and your card details do not reach us.
We use Google Analytics to count which pages get read, only if you press Accept on the cookie banner. Until then it does not load.
There are no ads on this site today. Advertising is planned, and advertising cookies may be used only if you agree.
1. Who we are
ServSafe Practice Exam (https://servsafepracticeexam.com) is operated by The ServSafe Practice Team, a small independent publisher. We are responsible for the personal data collected through this website and for accounts made on it.
Privacy inquiries: [email protected].
2. Information we collect
2.1 If you email us
We receive your email address and whatever you write. We use it to reply and to fix reported errors.
2.2 If you create an account
Accounts are held by our account service, the system we run to handle logins, mock exams and payments for our websites. It stores:
- Your email address, whether you have confirmed it, and when you joined.
- Your password, stored only as a one-way hash. If you sign in with Google instead, we receive your email address and a Google account ID from Google, and no password is stored.
- Your mock exam attempts: the questions you were given, the answers you picked, how long you spent, your scores and the questions you flag.
- Your subscription, if you buy one: which plan, when it started and ends, and the payment records PayPal sends us (amount, date and status).
- Basic security records such as when you logged in, and a hashed (scrambled) form of the IP address used to start an exam, to stop abuse of the free limits.
2.3 If you take a mock exam or practice quiz without an account
Timed mock exams and some practice quizzes are marked by our account service, so the answers you pick are sent to it. Without an account they are linked only to a random practice ID kept in your browser, which is how we count free use. We also keep a hashed (scrambled) form of your IP address, so that one network cannot claim unlimited free use. Exams and quizzes taken without an account are deleted after 90 days.
2.4 Information collected automatically
Our hosting provider keeps server logs to serve the site and defend it against abuse. They record the IP address, the page requested, the time and the browser's user-agent string.
Google Analytics also collects the following. The first item applies to every visit, and the second only once you opt in:
- Analytics data: IP address (truncated by Google before storage), approximate location at city level, device and browser type, pages visited, referring site and time of visit.
- Cookies and similar identifiers set by analytics, which link your visits together. Set only after you opt in, and described in our Cookie Policy.
3. Your sign-in token
When you log in, your browser keeps a sign-in token in local storage so you stay logged in between visits. It is removed when you log out. It is strictly necessary for the account to work and is listed in our Cookie Policy.
Links in our emails (to reset a password, confirm your email or log in) carry a one-time token. The site moves it out of the address bar as the page loads, before analytics runs, so it is not sent to Google Analytics.
4. Payments
Payments are processed by PayPal, so your card details do not reach us. PayPal handles the payment data it needs under its own privacy statement at paypal.com.
PayPal receipts are from Everyn Technologies Pty Ltd, the business name on the PayPal account.
5. How we use your information
- To run your account, mark your mock exams, show your results and progress, and apply the free limits.
- To provide a subscription you buy, stamp your email address on your printable PDF pack, and send the emails your account needs (confirmation, password reset, and a renewal reminder 3 days before each renewal).
- To run and improve the website, including understanding which pages and question topics are used most, and which questions are often answered wrongly.
- To reply to your emails and process corrections you report.
- To keep the site secure and to investigate abuse.
- To comply with our legal obligations, including keeping payment records for tax.
6. Cookies and tracking
We use a small number of cookies and similar technologies. Strictly necessary ones make the site and your account work. Analytics cookies are off by default and are set only if you opt in. Before that, analytics runs without them.
There are no advertising cookies today. Advertising is planned, and advertising cookies may be used only if you agree. We will add that choice to the cookie banner and update our Cookie Policy before any are used.
Our Cookie Policy lists who sets each cookie and how long it lasts. You can change or withdraw your choice at any time using the Cookie settings link in the footer.
7. Who we share information with
We do not sell your personal data.
- Payments: PayPal, which processes payments.
- Sign-in with Google, only if you choose it: Google sign-in (Google LLC), which tells us your email address and confirms it belongs to you.
- Email delivery: the provider our account service uses to send account emails such as confirmation and password reset links.
- Bot protection: the sign-up, password reset, login link and mock exam forms use Cloudflare Turnstile to block bots, which sends Cloudflare technical details about your browser and connection. It is strictly necessary for security, so it runs whatever you choose in the cookie banner.
- Analytics: Google Analytics 4 (Google LLC), which processes usage data on our behalf, only if you opt in.
- Hosting and infrastructure: our hosting provider, which processes server logs in order to serve the site, and the cloud provider that hosts our account service.
- Law enforcement or regulators, where we are legally required to disclose.
8. Where data is processed
Our providers may process data in the United States and in other countries, under their own terms and privacy policies.
9. How long we keep it
- Your account: for as long as you keep it. When you ask us to delete it, we remove your logins and stored data and anonymize the account, so your email address no longer appears on it.
- Payment records: kept after an account is deleted, for as long as tax law requires, without your email address attached. PayPal keeps its own copy under its own policy.
- Mock exams taken without an account: deleted after 90 days.
- Emails you send us: kept while the matter is open and for 24 months after the matter is closed, so we have a record of reported errors and what we did about them.
- Analytics data: retained for 14 months in line with our Google Analytics retention setting, then deleted automatically.
- Server logs: approximately 30 days, as retained by our hosting provider.
10. Your choices and rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, and withdraw your cookie consent at any time. This does not limit any rights you have under the law where you live.
To delete your account or get a copy of your data, email [email protected] from the email address on the account. If you have a subscription, cancel it from your account first, or ask us to. We aim to reply within 30 days.
11. Automated decisions
Your mock exams are marked automatically, and your account shows the topics you get wrong most often. We do not use this to make any decision about you outside the site.
12. Whether you have to give us anything
No law requires you to give us personal data. An account needs an email address and a subscription needs a payment through PayPal, and both are your choice.
13. Children's privacy
The site is aimed at food service workers and managers, and some of them are teenagers.
You must be 13 or over to create an account, and under 18 you need a parent or guardian's permission to buy a subscription. If you believe a child under 13 has made an account or sent us personal information, contact us and we will delete it.
14. Data security
The site and our account service are served over HTTPS. Passwords are stored only as hashes, card details do not reach us, and email links work once and expire.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
15. Links to other sites
We link to ServSafe, the FDA, the CDC and others. Once you follow a link you are on their site and their privacy policy applies.
16. Changes to this policy
We update this policy when our practices change. The Last Updated date at the top shows the current version, and material changes will be flagged on the site.
Related policies
Contact us
Questions about this page? Email [email protected], or use our contact page.
By using ServSafe Practice Exam you acknowledge that you have read and understood this Privacy Policy.