What we collect, why, and what we will never do with it. Written to be read, not to be survived.
Last updated 18 August 2026
The Green Room is run by The Green Room Guide Ltd, a company registered in England and Wales. We are the controller of the personal data described below, which means we decide what is collected and why, and we answer for it.
The Green Room Guide Ltd82A James Carter RoadMildenhallIP28 7DEUnited Kingdomhello@thegreenroom.guideFour things, and nothing else.
Your email address and a hashed password. We never store the password itself — it is salted and hashed, so nobody here can read it, including us.
Interview transcripts, speaking session transcripts, CVs you upload, and achievements you log. These are the substance of the thing you are paying for: scores only mean something over time if the earlier answers are still there to compare against.
Which parts of the product you open and finish, and when. This is a fixed list of seven fields — the mode, the length, the scenario, the number of questions, the minutes, a count, and a score band. Anything else your browser sends is discarded before it is written.
It is an allow-list rather than a filter, which is the important difference: a new field has to be deliberately added to be recorded at all.
If you arrived from a link with campaign tags on it, we keep those tags and the name of the site that referred you. We keep the site’s name only — never the full address you came from, because that can carry your search terms or the address of a private page.
We do not store click identifiers. A gclid or fbclid is a per-person identifier whose only use is handing it back to the advertising platform that issued it, and we do not do that.
| What | Lawful basis |
|---|---|
| Your account and your practice history | Performing the contract you signed up for |
| Payment records | Performing the contract, and our legal obligation to keep financial records |
| Usage analytics and acquisition source | Legitimate interests — knowing which parts of the product work |
| Service email (resets, invites, billing notices) | Performing the contract |
| Promotional email | Your consent, given by ticking a box that starts unticked |
Six processors. All of them are named, and there are no others.
| Who | What for | Where |
|---|---|---|
| Supabase | Database and file storage | EU |
| Vercel | Hosting the site and the API | US, under standard contractual clauses |
| Anthropic | The coaching itself — your answers are sent to Claude to be scored | US, under standard contractual clauses |
| Resend | Sending email | EU |
| Stripe | Taking payment. Your card details go to Stripe and never to us | US, under standard contractual clauses |
| Only if you choose “Continue with Google”. They confirm your email address to us and nothing else. If you sign in with a password, Google is never involved | US, under standard contractual clauses | |
| Trustpilot | Receives a copy of your purchase confirmation, and only that, so it can invite you to review us. Your email address and the fact you bought something — never your answers, scores or transcripts. You are under no obligation to write anything | EU/UK |
| Google Analytics | Only if you agreed when asked. Counts page views and roughly where in the world visits come from. It never receives your answers, scores, CV or transcripts — screens are reported by name only | US, under standard contractual clauses |
| Mixpanel | Only if you agreed when asked. Counts which parts of the room get opened and in what order. It never receives your answers, scores, CV or transcripts, and it does not record your screen | EU |
Anthropic is worth reading twice: coaching an answer means sending that answer to a model. If there is something you would not want leaving this country, do not put it in a practice answer.
On a team plan your employer is a controller of the fact that you have a seat. They are never given your scores, your transcripts, or your sessions.
Team reporting is aggregate and floored: no group figure is shown until at least five people have practised in that group, in that month, so nobody can be identified by working backwards from a small number. That floor is a constant in the code. It is not a setting, not a premium tier, and not available on request.
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to our processing it, or ask us to restrict it. Most of this you can do yourself and immediately — see Your data. For anything else, email hello@thegreenroom.guide and we will answer within one month.
If you think we have got something wrong, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk. You do not have to come to us first, and using one route does not close the other.
We use one item of browser storage to keep you signed in, and one that remembers where you came from for the length of a single tab. Both are necessary to run the service you asked for, and neither is shared with anyone.
There are two things we ask about: Google Analytics and Mixpanel, which between them count visits and tell us which parts of the room actually get used. Both set cookies, so we ask before loading either. Until you say yes, your browser never contacts either of them — there is no tag sitting there waiting. Mixpanel is on its European host, so that data stays in the EU. Neither records what you type, upload or say: your CV, the job adverts you paste and your answers are not sent to them. Say no and nothing about the room changes.
We store your answer on your own device. To change it, clear this site’s browser storage and you will be asked again on your next visit. There is still no advertising cookie, and we do not use analytics to build a profile of you or to target advertising.
If we change how any of this works, we will change this page and put the date at the top. If the change is material, we will email you about it.