ExamDraft

Privacy
DE EN

Transparency

Privacy at ExamDraft

ExamDraft is designed so your study materials are processed only for the features you actively start. In the default mode, AI requests go through ExamDraft's proxy; in BYOK mode, your browser talks directly to the provider you selected. If you consent to improvement, ExamDraft stores anonymized text and AI results regardless of which mode you use. This page explains exactly what is stored and which decisions you control.

Version: June 2026 Magic-link account Optional BYOK

Summary

  • In default mode, ExamDraft uses a magic-link account and secure server proxy.
  • Your API key is stored locally only if you use Advanced BYOK mode.
  • Analysis, generation, and AI grading send the required content to Anthropic or OpenRouter.
  • Analysis results and generated exams may be stored temporarily in your browser session.
  • If you consent to improvement, ExamDraft stores anonymized text and AI results — in both default and BYOK mode.
  • Without consent, no exam content is stored on ExamDraft servers.

Responsibility

ExamDraft is a static web application. ExamDraft is responsible for the product interface and the way these pages describe product behavior.

For content that you actively send to an AI provider, the relevant provider is additionally responsible for its own processing. That applies in particular when you trigger analysis, exam generation, or AI grading.

Contact for privacy questions: [email protected]

1. Data stored locally in the browser

ExamDraft stores part of its state exclusively in your browser so the app can continue working across page changes and sessions.

  • API key for the selected provider in localStorage, if you use Advanced BYOK mode.
  • Provider and model preferences in localStorage.
  • Temporary analysis results and generated exams in sessionStorage so you can continue within the same browser session.
  • No persistent ExamDraft document vault for your uploaded PDFs. Files are read for processing and then only used as needed for the active flow.

2. Data sent to AI providers

When you actively use ExamDraft for analysis, exam generation, or AI grading, the required content is sent either through ExamDraft's server proxy or, in Advanced BYOK mode, directly from your browser to the provider you selected. ExamDraft currently supports providers such as OpenRouter and Anthropic.

Depending on the feature, that may include:

  • text extracted from past exams,
  • text extracted from model solutions or marking schemes,
  • lecture context from uploaded PDFs or from your pasted topic summary,
  • answers you type when using AI grading.

In the default mode, ExamDraft processes this content through its own Cloudflare infrastructure, checks credits, and forwards it to the AI provider. In BYOK mode, the transfer goes directly from your browser to the selected API. The provider's own privacy terms apply in addition, especially the Anthropic Privacy Policy and the OpenRouter Privacy Policy.

2a. Voluntary product improvement

You can use ExamDraft without contributing material for improvement. If you check "I consent to anonymized data use for service improvement", ExamDraft may store anonymized extracted text from that upload and the related AI results to improve task detection, topic matching, and exam generation. This applies in both default mode (ExamDraft Credits) and BYOK mode (your own API key) — the consent checkbox controls storage, not the provider mode.

What is stored: anonymized extracted text (email addresses and student ID numbers are removed before storage), filename, document type, subject, consent version, timestamp, a content hash for deduplication, and AI outputs (analysis JSON, generated exams with model solutions).

What is not stored: PDF files as such, your API key, answers you type during AI grading, payment data.

Contributions are initially marked for review and are not automatically published. You can withdraw consent and request deletion of contributed content at any time: [email protected]

3. No general document vault

ExamDraft does not operate a general document vault for your uploaded exams. Without improvement consent, there is no product-side archive where ExamDraft keeps your uploads as a long-term content library.

With improvement consent, anonymized text contributions and related AI outputs are stored for review and quality improvement.

4. Usage analytics without study-content profiles

ExamDraft records basic product events such as landing page views, demo starts, upload starts, analysis, checkout, and generation so the funnel can be improved and product errors can be detected.

These events do not include PDF contents, answers, or generated exams. IP addresses are not stored raw; they are hashed. ExamDraft does not create personalized ad profiles from your study content.

5. Legal basis and user control

Where privacy law applies, local browser storage is mainly used to provide the functionality you explicitly requested. Transfers to external AI providers happen because you actively trigger those functions. In default mode, ExamDraft uses the server proxy; in BYOK mode, you use your own API key.

You decide:

  • whether to connect ExamDraft to an external provider at all,
  • which provider you use,
  • which documents or text you supply as context,
  • whether to paste a compact lecture summary instead of uploading full lecture PDFs.

6. Retention, deletion, and rights

Locally stored data remains in your browser until you remove it or until browser logic clears or replaces it. Session data is intended for the active session.

If you want to delete local ExamDraft data, you can remove the site's stored data in your browser settings. If you have questions about how an AI provider stores or further processes content after the API request reaches them, you need to contact that provider directly.

Contact: [email protected]