Privacy Policy

What we collect

When you create an account, we store the details you provide (such as name, email, and contact number) along with practice activity needed to show your progress — including question attempts and practice settings.

Specifically, our platform processes:

• Account Information: Name, email address, contact number, authentication identifiers, and account credentials.
• Practice & Learning Activity: Question attempts, test responses, score benchmarks, accuracy analytics, bookmarks, notes, and topic proficiency metrics.
• Technical & Device Information: IP address, browser type, operating system, and access timestamps collected strictly for service delivery, rate limiting, and platform security.

How we use it

We use your data to authenticate you, sync practice history across sessions, and improve product features. We do not sell your personal information.

We process your information exclusively to:

• Authenticate and maintain your secure access to practice portals and saved sessions.
• Compute performance analytics, accuracy trends, and personalized syllabus recommendations.
• Detect and prevent abuse, credential stuffing, automated scraping, and unauthorized service manipulation.
• Communicate critical account notices, security updates, and service announcements.

Storage & security

Account and practice data are stored in secure, encrypted cloud databases and managed authentication systems. Access is protected by signed-in sessions and strict row-level authorization rules ensuring that your private practice records and account details are inaccessible to unauthorized parties.

All network communication is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3). We maintain strict access controls and regular security audits to prevent data loss or compromise.

Platform Security & Abuse Prevention

We implement automated bot mitigation and anti-abuse verification systems to protect our platform, services, and users against automated spam, brute-force credential attacks, and malicious bot activity.

These security checks evaluate browser and device telemetry non-intrusively in the background to verify human authenticity without requiring invasive personal identifiers or tracking your browsing behavior across other websites.

AI Crawlers, Search & Automated Access

CrackIndia keeps its public pages open to search engines and AI systems, and protects everything that is not public: accounts, student telemetry, practice history and the logged-in question bank.

Logged-in areas and user data: The dashboard, practice sessions, admin tools and any user information are not public. Automated access to them, including bulk extraction of the logged-in question bank, is not permitted.

Rules for automated tools: Crawlers and scripts must respect robots.txt and our rate limits. Bypassing authentication, rate limits or other protections is forbidden and may result in the account or address being blocked.

Cookies & Local Storage

We use first-party cookies and local browser storage essential for providing our services, plus an analytics tool to understand how the site is used:

• Session Cookies: Maintained via secure session tokens to verify your identity and keep you safely signed in during navigation.
• Local Browser Storage: Used to remember your interface preferences (such as language and color theme) and temporarily cache active test progress so your work is not lost during network interruptions.
• Usage Analytics (Microsoft Clarity): We use Microsoft Clarity to see how visitors use our pages, through session recordings and heatmaps, so we can fix confusing screens. Clarity sets its own cookies and receives page interactions, device and approximate location data. Text typed into form fields, numbers and email addresses are masked and never sent. Signed-in sessions are linked only to an anonymous account ID, not your name or email. See Microsoft's terms.

We do not employ third-party advertising cookies or sell any user information to marketing brokers.

Trusted Infrastructure & Service Providers

We partner with enterprise-grade cloud hosting, database infrastructure, and network security providers to deliver resilient, secure, and performant services.

All infrastructure partners are subject to strict confidentiality, security standards, and data protection obligations. They are permitted to process data solely to the extent necessary to support core application functions and are contractually prohibited from using your information for independent commercial or advertising purposes.

Your Rights & Account Deletion (DPDP Act & Privacy Standards)

In accordance with applicable data privacy legislation and the Digital Personal Data Protection (DPDP) Act, you hold the following rights regarding your personal information:

• Right to Access: Review the personal data and practice history stored about you.
• Right to Correction: Update or rectify inaccurate or incomplete profile details.
• Right to Erasure: Request the permanent deletion of your account and learning records.
• Right to Withdraw Consent: Revoke authorization for data processing at any time.

To exercise your right to permanent deletion, you may visit our dedicated Account & Data Deletion Page or email us directly. Verified deletion requests are executed within 7 business days.

Contact & Grievances

Questions, feedback, or grievance redressal regarding this Privacy Policy or your data? Reach out via email at support@crackindia.com or through the contact options on crackindia.com.