Privacy Policy.

BITSAT Ranks (the “Service”) is operated from India by Malabar Matrix, a small student-led collective. For privacy questions or requests, write to contact@malabarmatrix.site. We respond to verified requests within 30 days.

Information you provide: the display name you enter before a mock test (used only for the public leaderboard), and an optional email address if you opt in to release notifications.

Information collected automatically: standard request metadata (IP address, browser user-agent, referrer, pages viewed, approximate location at country level) via our analytics providers, and a Cloudflare Turnstile token used once to verify you are human before starting a test.

We do not ask for, store, or sell phone numbers, addresses, government IDs, payment-card numbers, or social-media accounts. UPI donations on /donate are settled directly with your UPI app — we never see card or bank details.

After every mock test we save your full attempt — final marks, section breakdown, the option you picked for each question, the correct answer, and the question image references — to your browser’s local storage. This is what lets you reopen any past attempt and walk through it question-by-question.

That data stays entirely on your device. We don’t copy it to our servers. Clearing your browser cache, switching devices, or using incognito mode wipes it. You can also remove individual attempts (or all of them) from the Past Results section at any time.

We and our service providers use cookies, local storage, and similar identifiers for these purposes:

• Strictly necessary: Cloudflare Turnstile (bot protection), Vercel session cookies, and the local-storage entries described in § 3.
• Analytics: Google Analytics, Vercel Analytics, Vercel Speed Insights, and Microsoft Clarity to understand traffic, performance, and feature use in aggregate.
• Advertising: Google AdSense and its partners (see § 5) to serve relevant advertisements.

You can clear or block cookies via your browser settings. Doing so may break the test runner (which relies on local storage).

BITSAT Ranks displays advertisements served by Google AdSense and its certified partners. As a third-party vendor, Google uses cookies (including the DoubleClick DART cookie) to serve ads based on your prior visits to this site and other sites on the Internet.

Your choices:

• Opt out of personalised advertising by Google at google.com/settings/ads.
• Opt out of certain third-party vendor cookies at aboutads.info/choices or youronlinechoices.eu (EEA / UK).
• Read Google’s privacy + advertising policies at policies.google.com/technologies/ads.

If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, a consent banner will ask you to accept, customise, or reject personalised advertising before any non-essential cookies are set, in accordance with the IAB TCF and Google’s EU User Consent Policy.

We use Google Analytics, Vercel Analytics & Speed Insights, and Microsoft Clarity to measure traffic, page performance, and how features are used. Microsoft Clarity additionally records anonymised session replays (no keystrokes inside form fields). These services may set their own cookies and process your data subject to their respective privacy policies, linked above.

If you opt in during mock-test setup, your email address is stored securely in our database and is used only to email you about new mock tests, exam reminders, and platform updates. We don’t sell, rent, or share email addresses with third parties. Every email contains an unsubscribe option, and you can also remove yourself by writing to contact@malabarmatrix.site.

The Service is intended for users aged 13 and above preparing for the BITSAT entrance examination. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal data, please email us and we will delete it.

Depending on where you live, you may have rights to access, correct, port, or delete personal data we hold, and to object to or restrict certain processing — for example under the EU GDPR, the UK GDPR, India’s DPDP Act, or California’s CCPA/CPRA. To exercise any of these rights, email contact@malabarmatrix.site. We will verify your identity and respond within 30 days.

We do not “sell” personal information as defined by the CCPA, and we do not engage in cross-context behavioural advertising beyond what is required to serve AdSense ads as described in § 5.

Server-side data we store is limited to: leaderboard score entries, optional email subscriptions, donation records, and feedback messages. Leaderboard entries are pruned automatically to the latest 50 per board. Other records are retained until you request deletion. We use HTTPS in transit, scoped database credentials, and reputable infrastructure providers (MongoDB Atlas, Cloudflare R2, Upstash Redis, Vercel) but no system is 100% secure.

We may update this policy from time to time. Material changes will be highlighted via a banner on the homepage for at least 14 days, and the effective date at the top will reflect the last revision. Your continued use of the Service after a change constitutes acceptance of the updated policy.