Privacy policy

Last updated 30 September 2026

Papernibble is a tool for writing tests, giving them online or on paper, and marking them. This page says, in plain words, what information that involves, why, who else handles it, and what you can ask us to do with it.

Who we are

Papernibble (papernibble.com) is run from India. Write to us at papernibble1@gmail.com about anything on this page.

What we keep, and why

If you sign in (teachers, trainers, staff)

• Your email address, and your name if you add one. If you sign in with Google, Google tells us your email address and name; we ask for nothing else.
• Which organisations you belong to, and your role in each (admin, member or viewer), so we can show you your organisation's work and nobody else's.

Your organisation's work

Everything your team creates: questions, tests, groups, the names, roll numbers and email addresses of the people you add, and results. Your organisation decides what goes in and who sees it; we keep it so the team can work on it together and so it is there on every computer you sign in on.

If you take a test

• Your name, and the roll number or email address you type if the test asks for one.
• Your answers, and when each one reached us. We also note if your device's clock is far from ours, which the organisation may see beside your result.

You do not need an account to take a test. The organisation that gave you the test decides what happens to your result; ask them first, or write to us.

What stays on your device

So that Papernibble keeps working when the internet drops, it saves your work in your browser's own storage: a test-taker's answers until they reach us, and a teacher's copy of their organisation's work. Signing out removes a teacher's copy from that computer. If you sign in, your browser also keeps your sign-in session.

What we do not do

• No advertising, and we never sell or rent anyone's information.
• No advertising trackers, on this website or in either app.
• Nothing watches or records the test-taking app: no analytics, and no screen recording, while anyone sits a test.
• No test answers are ever sent to anyone except the organisation that gave the test.
• The right answers to a test are never sent to a test-taker's device.

Who else handles it

We use a few companies to run Papernibble. Each handles information only to provide their service to us:

• Supabase: our database, sign-in, and the server that receives answers.
• Vercel serves this website and the two apps.
• Google, only if you choose "Continue with Google".
• Resend sends sign-in and invitation emails.
• Microsoft Clarity, on this website and the teachers' app only, shows us where people click and scroll, so we can make them easier to use. In the teachers' app every piece of text is hidden from it, so it never sees names, emails, questions or marks. It runs only if you choose Allow in our cookie banner, and sets its own cookies to tell one visit from the next. Change your mind at any time with Cookie settings: the round cookie button in a corner of the screen, on this website and in the teachers' app (which also has it under Settings); choosing No thanks removes its cookies.

How it is protected

Everything travels over encrypted connections (HTTPS). Test links and invitation links are stored only in a scrambled form (a hash), so a copy of our database would not open anyone's test. Database rules keep each organisation's information walled off from every other organisation's, and are tested automatically.

How long we keep it

We keep your organisation's work for as long as your organisation uses Papernibble. An owner or admin can erase it from Settings at any time, and if you close your account or your organisation, write to us and we will delete what we hold within 30 days. Copies in backups are overwritten on their normal schedule.

What you can ask us

You can ask to see the information we hold about you, to correct it, or to delete it. Write to papernibble1@gmail.com. If you took a test, we may first check with the organisation that gave it, because it is their record too.

Children

Organisations often give tests to students under 18. The organisation is responsible for having permission to add its students' information, and should add only what the test needs. We use it for nothing else.

Changes

If we change this policy, we will update this page and the date at the top, and tell signed-in users about anything significant before it applies.