PRIVACY / 28 OCTOBER 2026

Your learning data belongs in your control.

PhysicsRank is operated by Interview Yoda Private Limited, Bengaluru, Karnataka, India, which decides how the data below is used (the controller, or data fiduciary under India’s Digital Personal Data Protection Act, 2023). Contact [email protected] for privacy questions, corrections, access or deletion requests, and grievances.

What we use and why

• Sign-in uses your Google account only. Google supplies your verified email address, name, profile image and account identifier, which we use to create and secure your account. We store server sessions and account acceptance records. We do not receive your Google password.
• Your saved problems, self-reported confidence, practice history and chapter reading positions support your study dashboard. These are learning aids, not certified scores.
• Newsletter addresses and confirmation records are stored only for the newsletter choice. Account creation never subscribes you.
• Support requests contain the address and information you submit so we can respond.
• When paid checkout is available, we retain order references, amounts, currency, status and membership dates. Dodo Payments, our merchant of record, collects payment and billing details at checkout and handles them under its own privacy policy; PhysicsRank does not store your card number, CVV or UPI details. Resend emails your purchase receipt.
• Cloudflare and our server process your IP address, browser details and requested pages to deliver and protect the site. Sign-in and form requests are rate-limited by network address to stop abuse.

Legal bases

Where the GDPR or UK GDPR applies, we use account, study and purchase data to provide the service you asked for (contract); security logs and abuse prevention rely on our legitimate interest in keeping the service safe; purchase records are kept to meet tax and accounting duties (legal obligation); and optional analytics and the newsletter rely on your consent, which you can withdraw at any time. Under India’s Digital Personal Data Protection Act, 2023, we process data for these stated purposes with your consent or for uses the Act permits, such as providing a service you requested.

Optional analytics, including Google Analytics

Analytics is off unless an adult allows it, and Do Not Track or Global Privacy Control keeps it off. If you allow it, we count page types by day ourselves and use Google Analytics 4, provided by Google, to measure visits to public pages. Google Analytics sets first-party cookies (named _ga and _ga_ followed by an identifier) with a random identifier for up to two years, and Google processes your IP address and device details to produce aggregate reports. We use Google’s consent mode with every purpose denied until you choose, send no query strings and no account, dashboard, checkout or admin pages, and keep Google signals, advertising and ad personalization off. Google keeps event data for no longer than the retention period set in our Analytics property, at most 14 months. You can withdraw at any time with the choice below; that stops Google Analytics and removes its cookies from this site. See how Google uses data from sites that use its services.

Storage on your device

Essential cookies secure sign-in and admin access, and a short-lived cookie carries your age and terms confirmation through Google sign-in. Browser storage remembers guest study progress; signed-in study records are stored in the account database. Privacy preferences last up to six months; the analytics preference is a readable first-party cookie so the page can honour it. Signing out ends the current session; account settings can revoke all sessions. Clear browser site data to remove guest records from a shared device.

Services involved

Hetzner hosts the application and database on a server in Helsinki, Finland. Cloudflare handles network delivery, security and the forwarding of email sent to our addresses. Google handles sign-in and, only if you allow analytics, Google Analytics. Resend delivers purchase receipts and confirmed newsletter emails. Dodo Payments processes payments as merchant of record when enabled. Each provider receives only what its task needs. We are based in India and several providers operate from the United States and elsewhere, so data may be processed outside your country; for transfers from the EU, EEA or UK we rely on the providers’ safeguards, such as standard contractual clauses. Network and security logs may include IP addresses and request details. We do not sell personal data, share it for cross-context behavioural advertising or use advertising trackers.

Retention and deletion

Account study data stays until you remove it or close the account. Expired authentication tokens and rate-limit buckets are removed by maintenance. Unconfirmed newsletter requests expire after 24 hours and are purged after seven days; unsubscribed addresses are removed after 30 days. Support requests are removed after 90 days. Aggregate counters retain 13 months. Purchase records needed for accounting or disputes are retained separately after an account is deleted, without the account link; provider transaction references may still identify a transaction to the payment provider. Nightly database backups are kept for 14 days on the server and for up to 90 days in an off-site copy held by the operator, so deleted records can remain in a backup until it expires.

Young learners

Open lessons can be used without signing in. Accounts, newsletter subscriptions and optional analytics are for adults aged 18 or older. A parent or guardian may manage their own adult account for study and makes any purchase from it. Do not submit a child’s personal details. Contact support if a child’s personal data has been submitted so we can investigate and remove it.

Your choices and rights

You can export study/account data or close your account in account settings, unsubscribe through every newsletter, or contact support for access, correction, erasure and privacy concerns. Depending on where you live, you may also object to or restrict processing, nominate someone to act for you, and complain to a data-protection authority; in India, once its process is available, you may complain to the Data Protection Board of India after first contacting us. We respond within the time the applicable law requires and may need to confirm your identity. Declining optional analytics does not affect learning or membership.

Security and changes

We use encrypted connections, restricted server access and access controls, but no system is perfectly secure. Where the law requires, we will tell you and the relevant authority about a breach affecting your data. We will mark changes to this notice with a new date.