Privacy Policy

When you sign in

• Mobile number — verified with a one-time password (OTP) sent by SMS. One mobile number identifies one account.
• Name and the exams you follow, if you add them.

When you buy something

• Test series / plans: the plan bought, amount, order and payment IDs, and payment status.
• Printed book: your name, mobile number, delivery address, city, state, PIN code and (optionally) email address, so we can deliver the parcel and send order updates. If you tick the Current Affairs updates box, we also use your email for those updates — you can unsubscribe at any time.
• Payments are processed by Razorpay. We never receive or store your full card number, CVV, UPI PIN or net-banking password. We keep only the order ID, payment ID, amount and status that Razorpay reports back.

As you use the Service

• Your test attempts, answers, scores, time taken and bookmarks — to show your results, solutions, history and analysis.
• Sections and pages you open while signed in (for your “continue where you left off” and progress features).
• If you use the Service without signing in, a random identifier stored in your browser (and a cookie) so your guest attempts and results stay yours. It is linked to your account if you later sign in.
• Reviews you post of the book. Your first name and delivery city are shown publicly next to an approved review.

Collected automatically

• Technical logs — a keyed (one-way) hash of your IP address and your browser’s user-agent, recorded against downloads and purchase-page events for security, abuse prevention and aggregate counts. We do not store your raw IP address in these records.
• Analytics — pages viewed, time spent, approximate region, device and browser type and referring source, via Google Analytics and Vercel Web Analytics (see Section 3).
• Cookies and browser storage (see Section 4).

• To sign you in, keep your account secure and prevent misuse.
• To run mock tests, score them, and show your results, solutions and analysis.
• To process purchases, give you access to what you bought, deliver printed books and handle refunds.
• To send transactional messages (OTP, order confirmation, dispatch and delivery updates).
• To understand how the Service is used so we can fix problems and improve content.
• To meet legal, tax and accounting obligations.

We do not sell your personal data.

We use Google Analytics (Google LLC) and Vercel Web Analytics to understand how the Service is used. These tools collect pages visited, time spent, approximate location, device and browser type and how you arrived. You can opt out of Google Analytics with Google’s browser add-on at https://tools.google.com/dlpage/gaoptout.

If we show advertising (for example through Google AdSense), Google and its partners may use cookies to show ads based on your visits to this and other websites. You can turn off personalised ads at adssettings.google.com.

• Sign-in cookie (ms_session) — keeps you signed in. HTTP-only, sent only over HTTPS.
• Guest cookies (ms_anon, ms_guest) — tie guest test attempts and downloads to your browser.
• Browser storage — remembers preferences such as language and your active exam.
• Analytics / advertising cookies — see Section 3.

On your first visit a cookie banner asks whether to allow analytics and ad cookies (“Accept all”) or only essential storage (“Essential only”); your choice is saved in your browser, and you can change or withdraw it any time with the “Cookie settings” link in the site footer.

You can delete cookies in your browser settings. Deleting the sign-in cookie signs you out.

We share personal data only with service providers that process it on our behalf, and only what each needs:

• MSG91 — sends and verifies OTP SMS (your mobile number).
• Razorpay — processes payments.
• Supabase — database and file storage.
• Vercel — website hosting and web analytics. Servers may be located outside India.
• Resend — sends order emails (your email address, if you gave one).
• Courier partners — your name, mobile number and delivery address, only to deliver a printed book.
• Google — analytics (and advertising, if shown).
• Authorities — where required by law.

Data is encrypted in transit (HTTPS). Sign-in cookies are HTTP-only. Payment details stay with Razorpay. Access to personal data is limited to the people who need it to run the Service. No method of storage or transmission is completely secure; if a personal-data breach occurs we will notify affected users and the Data Protection Board as the DPDP Act requires.

• Account, attempts and progress — while your account is active, and deleted within 30 days of a verified deletion request.
• Orders and payment records — for as long as Indian tax and accounting law requires, even after account deletion.
• Technical logs — up to 12 months.

You must be 18 or older to create an account, or use the Service with the consent and supervision of a parent or lawful guardian. We do not knowingly track or target advertising at children. If you believe a child has given us personal data without that consent, contact us and we will delete it.

Under the DPDP Act you may:

• Access a summary of the personal data we hold about you.
• Correct or update it (your name and exams can be edited in your profile).
• Erase it — request deletion of your account and data.
• Withdraw consent at any time (this ends your use of features that depend on it).
• Nominate a person to exercise these rights on your behalf.
• Raise a grievance with us (Section 10), and if unresolved, complain to the Data Protection Board of India.

To exercise any right, email support@mocksutra.com from, or mentioning, your registered mobile number. We may verify your identity by OTP before acting.

For any privacy question or complaint, contact our Grievance Officer:

Email: support@mocksutra.com
Phone / WhatsApp: +91 94789 89796

We acknowledge complaints within 48 hours and aim to resolve them within 15 days.

The Service links to other websites (for example, official exam notifications). Their privacy practices are their own.

We may update this policy. We will change the “Last updated” date and, for significant changes, tell you through the Service.