Privacy policy

We collect your name, email and a hashed password to run your account; your mock-test attempts and progress to show you analytics; and purchase records (handled by our payment provider — we never see your card or UPI details).

Sign-in records

We keep a record of sign-ins to your account — when it happened, whether it succeeded, and your browser's user-agent string. We do not store your IP address: it is replaced by a salted hash before anything is written down, in the sign-in record and in the anti-abuse counters alike.

Being precise about what that protects, because the honest version is narrower than the reassuring one: the hash means someone who obtained a copy of our database, and nothing else, could not recover your address from it. The salt is a separate secret. It is not a claim that the address is mathematically unrecoverable by us — there are only about four billion possible addresses, and anyone holding the salt could work through all of them. What the hash removes is the standing record; what stops us looking is that we have no reason to, and no feature that does.

This exists for one purpose: noticing when a single account is being used from an unusual number of places, which is how a shared or stolen login shows up. It is not used to track your reading, your location or your behaviour on the site. Sign-in records are deleted automatically after 180 days.

Separately, the questions typed into the “ask” box are stored without any user id or IP attached, so they cannot be linked back to you.

The one email we might send you

If you confirm your address you can choose to be told when online payments start working. That is a single message on a single occasion. We do not run a newsletter, we will not send digests or offers, and we will not add you to this list unless you ask — confirming your email address alone does not do it. Every message carries a link to leave, and leaving is immediate.

Your address is otherwise used only to operate your account: signing in, resetting a password, confirming that the address is real, and receipts if you buy something.

Sharing and deletion

We do not sell or share personal data. Embedded YouTube players are loaded from youtube-nocookie.com. You can request deletion of your account and data by emailing .

One exception, stated plainly rather than left in the small print: records of payments and of access being granted are kept even after an account is deleted, with the account's email retained on those entries. They are the only proof of what was bought and what was given access, and both tax rules and any later dispute depend on them surviving. Everything else goes.