Privacy Policy

Account data from Google sign-in, the only sign-in method: your name, email address, and profile image. We use this to create and identify your account.

Profile data you provide: the public username (handle) you choose, any comments, questions or accuracy reports you submit, and, if you joined through a referral link, who referred you.

Learning data: which questions you open, mark as done, bookmark, or vote on, your lesson and lab progress, and, if you take the readiness assessment, your answers and the context you give (such as role, target, experience and timeline), so we can show your progress and suggest what to study next. Our server also records operational events tied to your account, such as sign-up, purchases and saved progress. We keep aggregate counts such as question views.

Contact and subscription data: what you send through the contact form, and your email address if you join the newsletter or opt in to product emails in your account.

Optional product analytics: with analytics consent, we record browser events such as page visits, opening an answer, starting a drill, receiving exercise or assessment results, and starting checkout. These events do not contain your code, answers or test output. We store them on our server with a random identifier kept in your browser's local storage. If you are signed in, events can also be linked to your account. We compare observed activity with account creation and confirmed purchases to understand which parts of the site help readers learn and buy access. This is pseudonymous personal data. Declining stops these optional browser events; account, purchase, learning-progress and security records needed to provide the service remain separate.

Google Analytics: with analytics consent, Google collects usage information such as pages viewed, approximate location derived from IP, and device and browser type. Google Analytics does not load before you allow analytics.

Google Ads: advertising is a separate optional choice, and no Google Ads tag runs on the site today. If we add one, it will load only if you enable Advertising in Privacy choices; it would then measure advertising conversions and could support personalized advertising by Google. Allowing analytics alone never authorizes advertising storage, advertising user data or advertising personalization.

Payment data: when you buy access, Dodo Payments processes the transaction as merchant of record. To show the price for your country, the site reads the country Cloudflare reports for your connection, which it derives from your IP address; we do not save that country to your account. To start a checkout we send your name, email address, an internal order reference and that country as your billing country; Dodo Payments then collects your payment details and confirms your billing country to take the payment, calculate tax and send your receipt. We receive a confirmation and a reference, the price and the amount and currency actually charged, any refund or dispute, and the access window. We never receive your card number or UPI credentials.

Technical data: Cloudflare and our server process your IP address, browser details and requested pages to deliver and protect the site. We use these logs for security and troubleshooting, not to profile you.

To provide the Service you signed up for or bought (performance of a contract): authenticate you, unlock the content you are entitled to, save progress and bookmarks, run discussions, and send service emails: your purchase receipt and a reminder shortly before your access ends. If you start a checkout and don't finish it, we may send you one reminder email about it, with a link to unsubscribe from these reminders; receipts and account emails are separate.

To secure and improve the Service, prevent abuse and fraud, and provide support (legitimate interests, weighed against your rights); to keep purchase and tax records and answer lawful requests (legal obligation).

With your consent: optional analytics, advertising measurement, and newsletter or product emails. We do not send promotional email at present, and will only send it to people who opted in. You can withdraw consent at any time; that does not affect earlier processing.

Where India's Digital Personal Data Protection Act, 2023 applies, we process your personal data for the specified purposes above, on the basis of your consent or a legitimate use the Act allows, such as providing a service you asked for.

We do not sell your personal data and make no decisions about you by automated means that have legal or similarly significant effects.

Strictly necessary cookies are always on: we use them for authentication and session management (to keep you signed in), and an essential preference cookie (“ais_privacy”) remembers your privacy choice for up to 180 days. If you arrive through a referral link, an “ais_ref” cookie holds the referrer's handle for up to 30 days so the bonus can be credited when you sign up.

Your browser's local storage keeps interface preferences such as theme and text size, practice-test history, code-drill drafts and self-check checkpoints, and whether you dismissed the newsletter prompt. These stay on your device.

Use Allow analytics to enable our own product analytics and Google Analytics, or Decline optional to leave both analytics and advertising off. Customize lets you choose analytics and advertising separately. Both are off until you choose. Refusing does not affect sign-in, purchases, content access or saved progress.

Privacy choices in the footer lets you review or withdraw your choice. Changing an active Google choice refreshes open site pages to unload the running tags. We remove the corresponding analytics identifiers and accessible first-party Google measurement storage when you decline. Withdrawal stops future optional collection; it does not automatically erase records already collected or cookies held on other websites. Contact us for a deletion request.

We use a local-storage entry to notify other open tabs of your choice. Our optional analytics ID is created only after analytics consent. An older Accept choice requires a fresh choice under these disclosures; an older Decline stays declined.

Cloudflare provides content delivery and security, and may produce aggregate traffic statistics; it does not use our optional browser identifier. Google sign-in and payment-provider connections also have their own functions and are not disabled by declining optional tracking.

Service providers who help us run the product: Hetzner (hosting; our server and database are in Helsinki, Finland); Cloudflare (content delivery, security and inbound email routing); Google (sign-in and, with your consent, Analytics and any future Ads measurement); Resend (receipts, access reminders and other service email); Dodo Payments (merchant of record for purchases); and, if we use it to deliver contact-form messages to our inbox, Formspree. Our first-party product analytics stays on our own server. Each provider receives only what it needs and handles data under its own terms and privacy policy.

If you submit a question and we publish it, the question text (and, if you were signed in, your public handle) may appear publicly on the site and in our open-source question repository. Comments are public. Do not include anything private or confidential in a submission or comment.

We may disclose data if required by law, or where reasonably necessary to protect our rights, users, or the Service.

The All-Access Pass is sold on interviewyoda.com by InterviewYoda, which also runs this site, under its own terms and privacy policy. When you sign in here with a Google-verified email, this site asks the pass service whether that email has a pass and receives only the pass status, dates and grant identifiers, which it keeps to decide your access. No payment details are exchanged.

If you choose to upgrade from Premium you bought here to the All-Access Pass, the pass service asks this site which of your purchases are still running, for your verified email only. This site answers with each purchase’s reference, list price and currency, and purchase and end dates, nothing else. After the upgrade, the pass service tells this site which of those purchases became part of the pass. Requests in both directions are authenticated and signed.

We operate from India, host in Finland, and use providers based in the United States and elsewhere, so your data may be processed outside your country. For transfers from the EU, EEA or UK we rely on our providers' transfer safeguards, such as standard contractual clauses or adequacy decisions.

We keep account, profile, assessment and learning data while your account exists. Purchase records are kept as long as tax, accounting and dispute-handling needs require, including after an account is deleted. Contact messages are kept while we deal with them and any follow-up. Newsletter addresses are kept until you unsubscribe, with a suppression record so the unsubscribe is honoured.

Analytics events do not yet expire automatically; on an account-deletion request we delete or de-identify the events linked to that account. Published contributions may remain on the site after account closure, in line with the licence in our Terms. Server logs rotate on a short cycle. Nightly database backups stay on the server for 14 days, and an off-site copy kept by the operator is held for up to 90 days, so deleted data can persist in a backup until it expires.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. Under India's Digital Personal Data Protection Act, 2023, as its provisions come into force, you may also request a summary of your data and its processing, and nominate another person to exercise your rights. To exercise any of these, email us at the address below; we will respond within the time required by applicable law and may ask you to verify your identity.

In the EU, EEA or UK you may complain to a data-protection supervisory authority. In India, once its process is available, you may complain to the Data Protection Board of India after first raising the grievance with us.

California and other US state laws: we do not sell personal information. Today we do not share it for cross-context behavioural advertising; if we add Google Ads, that would happen only for visitors who switch on Advertising, and leaving it off is your opt-out. We will not discriminate against you for exercising a privacy right.

We use reasonable technical and organizational measures to protect your data, including encrypted connections and restricted server access, but no method of transmission or storage is completely secure and we cannot guarantee absolute security. Where the law requires, we will notify you and the relevant authority of a breach affecting your data.

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.

We may update this policy; the “last updated” date reflects the latest version, and we will ask for a fresh choice if optional purposes change.

For any privacy request, question or grievance, email [email protected] or use the contact form on the site.