Home/Privacy

// Legal

Privacy Policy

Last updated: 24 June 2026

The short version. We collect only what we need to run your account and your practice - mainly your Google sign-in details and the work you do on Prepshotz. Your code runs in your own browser. We never sell your personal data, we do not use third-party advertising trackers, and you can export or delete your data at any time. The full detail is below.

1. Who we are

Prepshotz is operated by Prepshotz Edutech Private Limited ("Prepshotz", "we", "us"), a company incorporated in India (CIN U72900MH2022PTC387631) and recognized as a startup by DPIIT under the Startup India initiative (DIPP110269), with its registered office at Akola, Maharashtra 444005, India. We are the data fiduciary (data controller) responsible for the personal data described here. This policy covers our website at https://prepshotz.com and our app at https://app.prepshotz.com (together, the "Service").

2. What we collect

We keep data collection to the minimum needed to run the Service.

  • Account data: when you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. We use Google sign-in so you do not create a separate password with us.
  • Practice data: the code and queries you write and run, your submissions and attempts, whether they passed or failed, the skills and topics you work on, hints you use, and your progress and streaks.
  • Technical data: your IP address, browser and device type, general location inferred from your IP, and security and diagnostic logs - the standard information needed to serve and secure any website.
  • Product analytics: first-party, privacy-respecting usage events (for example, that a query was run or graded) tied to a session or account identifier, so we can see what works and fix what does not. We do not use third-party advertising or cross-site tracking.
  • Cookies and local storage: see section 5.

We do not collect payment information (the beta is free), and we do not knowingly collect sensitive personal data. We do not buy personal data from data brokers.

3. Your code runs in your browser

For SQL today, and for other in-browser skills as they roll out, your code is executed and graded locally in your own browser, inside a sandboxed worker - not on our servers. We store the outcome of your attempts (such as your submission and whether it passed) so we can save your progress and adapt your practice.

4. How we use your data, and our legal bases

We use your data to:

  • create and secure your account and sign you in (to perform our contract with you);
  • run the core product - save your progress, grade your work, and adapt practice to the mistakes you make (to perform our contract, and our legitimate interest in making the Service work);
  • understand and improve the Service through aggregate analytics (your consent where required, and our legitimate interest);
  • communicate with you about the Service, including important changes (our contract); and
  • comply with law and protect the Service, our users, and our rights (legal obligation and legitimate interest).

Where the law requires consent - for example, certain analytics, or processing the data of a minor - we rely on that consent, and you can withdraw it at any time. We do not sell your personal data, and we do not use it for third-party advertising.

5. Cookies and local storage

We use a small, deliberate set of cookies and browser storage, and no third-party advertising or cross-site tracking cookies. This section also serves as our cookie policy.

  • On our website (https://prepshotz.com): a single functional item in your browser's local storage that remembers your light or dark theme choice. Nothing on the website tracks you across other sites.
  • In the app (https://app.prepshotz.com): a strictly necessary authentication cookie that keeps you signed in across our website and app. Without it, sign-in cannot work.
  • Security: our infrastructure provider (Cloudflare) and its Turnstile bot-check may set strictly necessary tokens to tell humans from bots and protect the Service.
  • Analytics: the first-party product analytics described in section 2. Where consent is required, we will ask before any non-essential analytics is collected.

You can clear or block cookies and local storage in your browser settings, but blocking strictly necessary cookies will stop sign-in from working.

6. Who we share data with

We do not sell your personal data. We share it only with:

  • Google, when you choose to sign in with Google (governed by Google's privacy policy);
  • Cloudflare, Inc., which provides our hosting, database, content delivery, security, and analytics infrastructure;
  • other service providers strictly to operate the Service, under contracts that require them to protect your data and use it only on our instructions;
  • authorities or third parties where we are required by law, or to protect the rights, safety, and security of our users, the public, or Prepshotz; and
  • a successor entity, in connection with a merger, acquisition, or sale of assets - in which case we will tell you, and this policy will continue to protect your data.

7. Where your data is stored

Your account and practice data are stored on Cloudflare's D1 database, hosted in the India region. Some providers (such as Google and Cloudflare) may process limited technical data - for example, sign-in or security data - on infrastructure outside India. Where that happens, it is done under appropriate safeguards and only as needed to run the Service.

8. How long we keep it

We keep your account and practice data for as long as your account is active. If you delete your account, we delete or irreversibly anonymize your personal data within a reasonable period, except where we must keep limited records to comply with law, resolve disputes, or enforce our Terms. Product analytics events are kept for a bounded period (around 90 days) and then aggregated or deleted.

9. Your rights and choices

Depending on where you live, you have rights over your data. For everyone, we offer:

  • Access - get a copy of the personal data we hold about you;
  • Correction - fix data that is wrong or out of date;
  • Deletion - delete your account and associated personal data;
  • Portability - export your data in a usable format;
  • Withdraw consent - where we rely on consent, withdraw it at any time;
  • Grievance redressal - raise a concern and have it addressed (section 11).

To exercise any of these, email us at info@prepshotz.com or use the controls in the app. We will respond within the timelines required by applicable law. Using these rights is free, and we will not discriminate against you for it.

10. Children and minors

Prepshotz is intended for users who are 18 or older. If you are under 18, you may use Prepshotz only with the involvement and verifiable consent of a parent or legal guardian. We do not knowingly collect a child's personal data without verifiable parental consent, and we do not track, profile, or serve targeted advertising to children. If you believe a child has given us personal data without the required consent, contact us at info@prepshotz.com and we will delete it.

11. How we protect your data, and your Grievance Officer

We protect your data with encryption in transit (HTTPS), access controls, and sandboxed in-browser code execution, so your code stays on your device during grading. We avoid storing sensitive identifiers in plaintext logs. No method of transmission or storage is ever completely secure, but we work to protect your data and to notify you and the authorities of a breach where the law requires.

In line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you can contact our Grievance Officer for any data protection concern:

We will acknowledge and address complaints within the time the law requires. If you are not satisfied, you may complain to the Data Protection Board of India.

12. Changes to this policy

We may update this policy as the Service evolves. We will change the "last updated" date above and, for material changes, give you clearer notice. Continuing to use the Service after a change means you accept the updated policy.

13. Contact

Questions about this policy or your data? Email Prepshotz Edutech Private Limited at info@prepshotz.com.