Privacy Policy

Before publishing: this describes what the application actually does, so it is accurate rather than generic — but it is not legal advice. Have it reviewed against the DPDP Act 2023 and fill in the [...] placeholders, particularly the contact address and the identity of the data fiduciary.

Last updated: 19 August 2026

The short version

You can read every notification on this site without an account and without giving us your name, and we do not sell your data. The site is paid for by advertising, so Google serves ads here and sets cookies to do it. We also use Google Analytics to understand which pages are read. Both are described below, including how to opt out of each. We ask for an account only when you want to take part, by liking or commenting.

Who is responsible

[Registered business name] ("we") operates ExamAlerts and is the data fiduciary for the information described here. Reach us at [privacy@example.com].

What we collect

If you only read

• Page views. Each notification and organisation page keeps a counter. It is incremented once per browsing session using a marker stored in your browser's sessionStorage. The counter is a number on the page; it is not linked to you.
• A browser identifier. A random ID is generated on first visit and kept in your browser's localStorage. It exists to avoid counting the same reader twice. It contains no personal information and never leaves your device except as described below.
• Standard server logs. Our hosting provider records requests, including IP addresses, for security and reliability.

Analytics

We use Google Analytics to count visits and see which notifications people read. It sets cookies in your browser and sends Google a record of the pages you view, your approximate location, and general device information. Your IP address is anonymised before it reaches Google.

We do not use analytics to build a profile of you. You can opt out with Google's browser add-on or by blocking analytics in your browser or extension of choice.

Advertising

Running this site costs money, and advertising is how it is paid for. We use Google AdSense, which places ads on the pages you read.

To do that, Google and its partners set cookies and similar identifiers in your browser. These record which pages you visited here and on other sites carrying Google ads, and are used to choose which ads you see and to measure whether an ad worked. Google may use this to show you personalised ads.

We do not give Google your name, email address or account details for advertising, and we do not receive from Google any information identifying you personally.

You can control this:

• Turn off personalised ads in Google's Ads Settings — ads still appear, but stop being based on your browsing.
• Opt out across many networks at once at optout.aboutads.info or youronlinechoices.eu.
• Block them in your browser, with an ad or tracker blocker, or by refusing third-party cookies.

How Google uses data from sites that use its services is described in Google's own policy.

If you create an account

• Your name and email address, and a password stored only as a hash — we cannot read your password.
• If you sign in with Google, the name, email address and profile picture Google shares with us. We never receive your Google password.
• If you register a passkey, the public key for that credential. The private key never leaves your device.
• Session cookies, which keep you signed in. These are strictly necessary and cannot be disabled while you are signed in.

If you comment

• The comment text and the name shown against it, taken from your account.
• A one-way hash of your IP address. We do not store the address itself. It is combined with a secret and hashed, which lets us rate-limit abuse without ever holding the underlying address. The hash cannot be reversed back to an IP.

If you enable notifications

• A push subscription issued by your browser: an endpoint URL and the keys needed to encrypt messages to it. It identifies a browser, not a person, and is deleted as soon as it stops working or you turn notifications off.

Why we collect it

We do not use your data for automated decision-making or profiling.

Who we share it with

We do not sell or rent personal data. We share it only with the service providers needed to run the site:

• [Hosting provider] — serves the site and keeps request logs.
• [Database provider] — stores the data described above.
• [Email provider] — delivers password resets and alert emails.
• Google — analytics and advertising for every visitor, and additionally sign-in if you choose to use it.
• Your browser's push service — only if you enable notifications.

We may also disclose information where the law requires it.

How long we keep it

• Account data: until you delete your account.
• Comments: until you or a moderator delete them.
• Hashed IP addresses: [retention period, e.g. 90 days].
• Advertising cookies: for the lifetime Google sets on each, unless you clear them or opt out as described above.
• Push subscriptions: until they fail or you turn notifications off.
• Server logs: as long as our hosting provider retains them, typically [retention period].

Your rights

Under the Digital Personal Data Protection Act 2023 you may ask us to:

• confirm what personal data we hold about you and give you a copy,
• correct anything inaccurate or incomplete,
• delete your account and the personal data attached to it,
• withdraw a consent you previously gave, such as notifications,
• nominate someone to exercise these rights if you are unable to.

Write to [privacy@example.com] and we will respond within [30 days]. If you are unhappy with our response you may complain to the Data Protection Board of India.

Removing your data yourself

• Notifications: turn them off with the toggle in the site footer.
• Browser identifier and view markers: clear this site's data in your browser settings.
• Account and comments: [describe the in-app route, or the address to write to].

Children

This site is intended for people applying for government examinations, which generally requires being 18 or over. We do not knowingly collect data from children. If you believe a child has given us personal data, write to us and we will remove it.

Changes

If we change this policy we will update the date at the top. Material changes will be announced on the site.