Privacy

What we hold about you, and who can see it.

Last updated 13 September 2026.

The short version

Who this covers

Two different people use Trial Day, and several answers below differ for each.

Candidates are people sent an invitation link by an employer who is hiring. If that is you, the employer decided to assess you and chose what to tell us about you. We hold your work on their behalf.

Customers are the people at that employer who sign in to set up assessments and read results.

Trial Day is run by a sole trader based in India. Your data is not: it is stored in the United Kingdom and processed on servers in the Netherlands, as described below.

If you are a candidate

What the employer tells us about you

Only what they type when they create your invitation.

Your email addressSo the invitation is addressed to you rather than to whoever happens to be holding the link.
Your nameOptional. Some employers leave it blank.
The roleThe job title and internal reference they are hiring for.

We do not ask them for anything else, and we never ask you for your age, your gender, your ethnicity, your photograph, your address, or your identity documents. The software has nowhere to put them.

What is recorded while you work

Your analysisThe queries you run, the results you save as evidence, the answers you choose, and the reasoning you write.
TimingWhen you started, how long each decision took, and when you finished.
Whether the page had focusOnly whether this browser tab was in front, and for how long it was not. This is how the rule against leaving the assessment is enforced, and it is explained to you before you begin.
Help you asked forWhich hints you took, and at what point.
Your resultThe score and the written report produced from all of the above.

What is not recorded. Anything outside this browser tab. We cannot see your other tabs, your other windows, your screen, your camera, your microphone, your keystrokes elsewhere, or anything else running on your computer. The only thing observed about your attention is whether this page was in front, which your own browser tells the page directly.

Proving the invitation is yours

Before you begin, you are asked to prove you own the email address the invitation was sent to. You can do that by signing in with Google or Microsoft, or by receiving a short code by email.

If you sign in with a provider, we receive one thing from them: your verified email address. We do not receive and cannot see your password, your contacts, your calendar, your files, or anything else in that account, and we do not post anything anywhere. Your address is compared with the one the employer typed, and then we keep only the fact that it matched and which method you used.

Who sees your work

The employer who invited you. That is the whole list.

Your result is not shown to any other employer, is not added to any pool, database, or profile that other companies can search, and is not used to build one. If you sit an assessment for two different companies, neither is told about the other.

Why we are allowed to hold it

The employer asked us to assess you as part of their hiring, and we do that for them and only for them. In European terms, the employer is the data controller and Trial Day is their processor. Practically, this means that if you want your data removed you can ask either of us, and we will act on it.

If you are a customer

We hold your work email address, your name if you gave one, and a one-way scrambled version of your password. The password itself is not stored and cannot be recovered from what is, which is why a forgotten password is reset rather than looked up.

We also keep the ordinary record of what you did in the console: the roles you created, the invitations you sent, and the results you opened.

Cookies, and the tracking that is not here

There is one cookie in the entire product. It is set when a customer signs in to the console, it holds nothing but a random session identifier, it cannot be read by JavaScript, and it expires on its own.

Candidates are given no cookie at all. Your sitting is identified by the link you were sent.

There is no analytics, no advertising pixel, no session recording, no heatmap, no fingerprinting, and no third-party script of any kind on any page. This is not a setting we have turned off. There is no such code in the product, which is why there is also no cookie banner to click past.

The companies that help us run it

Four, and no others.

RailwayRuns the servers. Amsterdam, Netherlands.
SupabaseStores the database. London, United Kingdom.
ResendSends the verification code, when you ask for one. It receives your email address and a six-digit number, and nothing else. No other email is ever sent to you.
AnthropicOnly as described immediately below.

A hiring manager reading a report can press a button to have one section of it summarised in plain English. Pressing that button sends the material in that section, which can include reasoning you wrote, to Anthropic to produce the summary.

Three things about that are worth stating precisely. It happens only when a person deliberately presses the button, never automatically and never in advance. Producing and reading a report otherwise makes no outside request at all, so your work stays inside this system unless somebody chooses to send one part of it out. And on accounts with no summarising configured, the button does not exist and nothing is ever sent.

Your data is not sold, rented, licensed, or shared with anybody else, in any circumstance. There is no advertising business here to feed.

How long it is kept

A result is kept while the employer's account is open, because the point of it is that they can look back at how somebody they hired compared with the people they did not. We do not put an arbitrary clock on another company's hiring records.

An invitation that is never opened expires by itself and stops working.

When a result is deleted, the decision log behind it goes with it. That matters more than it sounds. Everything a candidate did is in that log, so removing only the summary would leave the substance behind. Deletion removes both.

Asking for a copy, or for deletion

Whoever you are, you can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. You do not have to give a reason, and it costs nothing.

Candidates can ask us directly, at the address below, or ask the employer who invited them. Either route works. Because the employer decided to assess you, we will normally tell them that a deletion happened, but not why you asked.

We answer within thirty days and usually much sooner. If you are in the United Kingdom or the European Union, you can also complain to your national data protection authority, and you do not need to come to us first.

If something goes wrong

If candidate or customer data is exposed, we will tell the affected customers within seventy-two hours of finding out, describe what happened in specific terms, and say what we are doing about it. A notice saying that an incident may have occurred is not what we intend to send.

Changes to this page

The date at the top changes when the text does. If a change means we would use your data for something materially different from what is described here, we will contact affected customers rather than quietly reissuing the page.

Contact

Write to [email protected].

Candidates who would rather not contact us directly can reply to whoever sent the invitation.