Privacy Policy

Account data from Google sign-in: your name, email address, and profile image. Google is the only way to sign in. We use this to create and identify your account.

Profile data you provide: the public username (handle) you choose, and any comments or questions you submit. If you joined through a referral link, we record who referred you.

Study records: the lessons and questions you mark complete, bookmarks, votes, ratings and saved practice you submit. These support the learning features you choose to use. Our server also records operational events tied to your account, such as account creation, confirmed purchases and saved progress, to run and support the Service.

Messages and subscriptions: what you send through the contact form (name, email address and message), and your email address if you subscribe to the newsletter or turn on product emails in your account.

Internship applications: if you apply for an internship, the name, email address, location, start date, written answer and résumé link you submit, linked to your account. We store the link only; we do not download or copy the document behind it.

Payment data: Dodo Payments, our merchant of record, collects the payment and billing details it needs to take the payment, calculate tax and issue your receipt, and handles them under its own privacy policy. To start a checkout we send it your name, email address and the country your connection comes from, which sets the price and the payment methods offered. That country comes from Cloudflare, which delivers this site; we do not store it. We receive a confirmation and references, the amount and currency charged, any refund or dispute on the payment, and the access window. We never receive your card number or UPI credentials.

Technical data: Cloudflare and our server receive your IP address, browser details and the pages requested whenever you visit, because that is how web pages are delivered and protected. These logs are used for security and troubleshooting and are not used to profile you.

Optional analytics: with permission, we record public page paths and selected actions, such as opening an answer or starting checkout. A random browser identifier links these events; signed-in events can also link to your account. This is pseudonymous data, not anonymous data. Google Analytics, with the same permission, receives usage events and may process device, browser and approximate location information. We exclude query strings, private account paths and free-text answers from our browser usage events.

To provide what you signed up for or bought (contract): authenticate you, unlock the content you are entitled to, save progress and bookmarks, run discussions, and send service emails such as your purchase receipt and a reminder about a week before your access ends.

To keep the Service secure and working, prevent abuse and fraud, answer support requests and understand which features are used (legitimate interests, balanced against your rights). To keep purchase and tax records and respond to lawful requests (legal obligation).

If you start a checkout and don’t finish it, we may send you one reminder email about it, with a link to unsubscribe (legitimate interests). Receipts and account emails are separate.

To assess an internship application and contact you about it (steps taken at your request before entering into an arrangement, and the consent you give on the form). Applications are read by the site owner and are not shared with anyone else.

With your consent: optional analytics, advertising measurement, the newsletter and product emails. You can withdraw consent at any time, which does not affect processing that happened before.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

Strictly necessary: sign-in session and security cookies set by our authentication system, and the “aip_privacy” cookie that stores your privacy choices for up to 180 days. If you follow a referral link, a “dip_ref” cookie holds the referrer's handle for up to 30 days so the referral can be credited when you sign up.

Preferences kept in your browser's local storage: theme, text size, whether you dismissed the newsletter prompt and similar interface choices. They stay on your device.

Optional, only after you allow analytics: our own random analytics identifier (in local storage) and Google Analytics cookies (such as “_ga”). Advertising measurement is a separate choice for Google Ads; no Google Ads tag runs on the site today, and if we add one it will load only with that permission. We do not enable Google ad personalization or Google Signals.

Use Privacy choices in the footer to review, reject or change optional purposes. When you withdraw a purpose, we stop new optional events and remove accessible measurement identifiers for that purpose. An active Google tag requires a page refresh to stop its existing listeners; the control explains this before you save. Withdrawal does not undo data already sent. Refusing optional measurement does not disable sign-in, purchases, downloads or saved progress.

We use service providers who process data on our behalf or, for payments, as an independent seller: Hetzner (hosting; our server and database are in Helsinki, Finland); Cloudflare (content delivery, security and inbound email routing); Google (sign-in, and Google Analytics with your permission); Dodo Payments (merchant of record for purchases); Resend (sending receipts, reminders, the newsletter and other transactional email); and, where we use it to deliver contact-form messages to our inbox, Formspree. Each receives only what it needs for its function and handles it under its own terms and privacy policy.

If you submit a question and we publish it, the question text (and, if you were signed in, your public handle) may appear publicly on the site. Comments are public. Do not include anything private or confidential in a submission or comment.

We may disclose data if required by law, or where reasonably necessary to protect our rights, users, or the Service.

The All-Access Pass is sold on interviewyoda.com by InterviewYoda, which also runs this site, under its own terms and privacy policy. When you sign in here with a Google-verified email, this site asks the pass service whether that email has a pass and receives only the pass status, dates and grant identifiers, which it keeps to decide your access. No payment details are exchanged.

If you choose to upgrade from Premium you bought here to the All-Access Pass, the pass service asks this site which of your purchases are still running, for your verified email only. This site answers with each purchase’s reference, list price and currency, plan length, and purchase and end dates, nothing else. After the upgrade, the pass service tells this site which of those purchases became part of the pass. Requests in both directions are authenticated and signed.

We are based in India, our server is in Finland, and several providers (including Google, Cloudflare and Resend) operate from the United States and elsewhere. Your data may therefore be processed outside your country. Where the GDPR or UK GDPR applies, we rely on the safeguards our providers offer for such transfers, such as standard contractual clauses or adequacy decisions.

Account, profile and study records: while your account exists. Purchase records: as long as tax, accounting and dispute-handling needs require, even after an account is deleted. Contact messages: as long as needed to handle them and any follow-up. Newsletter: until you unsubscribe; we keep a record of the unsubscribe so it is respected. Internship applications: up to 12 months after we decide on them, then deleted; ask us and we delete yours sooner. Deleting your account deletes your applications with it.

Analytics events have no automatic expiry yet; when you ask us to delete your account, we delete or de-identify the events linked to it. Published contributions may remain on the site after account closure, in line with the licence in our Terms. Server logs rotate on a short cycle. Nightly database backups are kept for 14 days on the server and for up to 90 days in an off-site copy held by the operator, so deleted data can remain in a backup until that copy ages out.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, to withdraw consent, and to complain. Under India's Digital Personal Data Protection Act, 2023, as it takes effect, you may also ask for a summary of the data we process and nominate someone to exercise your rights. To make any request, email us using the details below; we will respond within the time required by applicable law and may need to confirm your identity first.

If you are in the EU, EEA or UK, you may complain to your local data-protection authority. In India, you may escalate a complaint to the Data Protection Board of India once its procedures are available, after first contacting us.

California and similar US state laws: we do not sell personal information and do not share it for cross-context behavioural advertising. You will not be treated differently for exercising a privacy right.

We use reasonable technical and organizational measures to protect your data, including encrypted connections, access controls and server hardening, but no method of transmission or storage is completely secure and we cannot guarantee absolute security. If a breach affects your data, we will notify you and the authorities where the law requires.

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy; the “last updated” date reflects the latest version, and we will request a new choice if optional purposes change.

For any privacy request, question or grievance, email [email protected] or use the contact form on the site. We aim to acknowledge requests within a few working days.