Legal / Privacy
Privacy
Version of November 8, 2026
Who runs this site
Quoto is a practice site for quantitative trading interviews. Quoto is run by FOP Kuryliak Danylo, a sole proprietor in Lviv, Ukraine. Contact: support@quoto.dev. The operator is the controller of your data. You can use every right below yourself on the Account page, and it takes effect at once.
What we store for an account
Your email and password sit with Amazon Cognito; we never see the password. We store what you do here: sessions, answers, scores, review cards, target firms, saved jobs, assessment results, interview transcripts and your consent log. A verified student adds the university domain and a hash of the address; until it is confirmed, at most 24 hours, the address itself is kept and Amazon Web Services, our email provider, holds it to send its confirmation link. If you sign in with Google, Google tells us your email address and that it is verified; we get no password and nothing else from your Google account. We send only the emails you ask for: a sign-up code, a password reset, a student code or confirmation link. There are no newsletters or marketing emails to unsubscribe from.
What we store for a guest
A random guest id and your trainer sessions and test results, with no name or email. Other progress, such as games and library marks, stays on your device.
What leaves for other services
When you take an AI interview, your typed answers and the question go to Anthropic, or to Amazon Bedrock, to write the reply and the scorecard. Nothing else is sent to a model. Questions, firm facts and job listings are public and hold nothing about you.
Analytics without cookies
We count page views and a few events per day and per page. A count holds the date, the event name and the page path, and nothing about the visitor: no cookie, no identifier, no IP address. If your browser sends Global Privacy Control, nothing is counted.
Security logs
Your IP address is used for about 2 minutes to limit request rates, and its record is removed within 2 days. Service logs are kept for 30 days and are not linked to accounts.
On your device
We set one cookie, lang, and only when you pick a language at the foot of a page, so the site's bare address opens in that language. The browser keeps your theme, progress and sign-in tokens in local storage so training works offline. All of this is needed for what you asked for, so there is no consent banner. The Cognito sign-in page sets its own cookies to sign you in. The iPhone app's reminder stays off until you turn it on, and you can turn it off in its settings.
Where data lives
In the Amazon Web Services region in Frankfurt (eu-central-1). Pages are delivered through Amazon CloudFront. Anthropic processes interview text under its own terms. Photos on the home page load from Wikimedia Commons, which sees your IP address as any site does that a page loads from.
How long we keep it
Account data stays until you erase it. Guest data expires 180 days after it was written. A deleted session leaves a marker for 90 days so your other devices learn of it. Analytics counts last 400 days. A university code lasts 30 minutes, a university confirmation link 24 hours. Backups roll off within 35 days.
Why we may do this
We store your training to provide the service you asked for. Security limits and aggregate counts rest on our legitimate interest in keeping the site running. Student verification rests on your consent, logged on your Account page.
Your rights
You can read, download and erase your data on the Account page, which also withdraws any consent, and you can complain to your data protection authority. To ask for a correction, to object to processing or with any question about your data, write to support@quoto.dev.
Payments and Paddle
When you buy Pro on the web, Paddle.com is the payment processor and the Merchant of Record: it collects your name, email, card or other payment details, billing country and postcode, works out tax, prevents fraud and sends receipts, under its own privacy notice (paddle.com/legal/privacy). We never see your card. Paddle tells us your subscription's state, its period, a customer number and a subscription number, and we keep those with your account. On the iPhone, Apple handles the payment.