NoukariCrack ("we", "us", "our") operates the website www.noukaricrack.in and all associated services including our e-book library and daily quiz engine (collectively, the "Platform").
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under applicable Indian law including the Information Technology Act, 2000. By accessing or using the Platform you agree to the terms of this policy.
1. Information We Collect
1.1 Information You Provide Directly
- Account registration: name, email address, phone number, password (stored as a bcrypt hash — never in plain text).
- Payment details: transaction ID, order ID, and payment metadata processed through Cashfree. We do not store raw card numbers or UPI PINs.
- Communications: emails and support queries you send us.
1.2 Information Collected Automatically
- Log data: IP address, browser type, operating system, referring URL, pages visited, timestamps.
- Usage data: books opened, quiz attempts, score history, streak data, and reading progress.
- Cookies & local storage: session tokens (JWT stored in HttpOnly cookies), preference settings.
1.3 Information from Third Parties
- Google OAuth: if you sign in with Google, we receive your name, email, and profile picture from Google's authorised API.
- Cashfree webhooks: payment success / failure events to update your purchase status.
2. How We Use Your Information
- Create and manage your account and subscription.
- Provide access to e-books, quizzes, and performance analytics.
- Process payments and send order confirmations via email.
- Send OTP emails for login verification and password reset.
- Send service announcements and (where opted in) promotional communications.
- Monitor and improve Platform performance, detect fraud, and ensure security.
- Comply with legal obligations.
3. Sharing of Information
We share your data only in the following limited circumstances:
- Service providers: Cashfree (payments), Cloudinary (image storage), Supabase/Neon (database hosting), SMTP providers (transactional email) — each bound by their own privacy obligations.
- Legal requirements: if required by a court order or government authority.
- Business transfer: in the event of a merger or acquisition, your data may be transferred to the successor entity under the same privacy protections.
4. Data Retention
- Active account data is retained for the duration of your account.
- After account deletion, we may retain anonymised usage statistics for up to 2 years.
- Payment transaction records are retained for 7 years as required by Indian accounting and tax laws.
- OTP and session tokens are short-lived and purged automatically.
5. Cookies and Tracking
- Essential cookies: HttpOnly JWT cookies required for authentication — cannot be disabled.
- Preference cookies: store your language / theme settings.
- Analytics cookies: anonymous usage metrics.
You may disable non-essential cookies in your browser settings.
6. Security
- Passwords are hashed using bcryptjs — never stored in plain text.
- All data in transit is protected by TLS/HTTPS.
- API routes implement rate limiting, CORS origin validation, and middleware-based authentication.
- E-book content is protected via secure streaming, watermarking, and disabled download controls.
7. Children's Privacy
The Platform is intended for users aged 13 years and above. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
8. Your Rights
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate data.
- Deletion: request deletion of your account and associated personal data.
- Opt-out: unsubscribe from marketing emails using the unsubscribe link in any email.
Email satyam.techtitans@gmail.com to exercise any of these rights. We respond within 30 days.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a prominent notice on the Platform and/or sending an email.
10. Contact Us
For any questions about this Privacy Policy: