Privacy policy

Overview

CUETFreeMockTest is an independent educational website for CUET-UG preparation. This policy explains what information the site handles, why it is handled and the choices available to you. It applies to this website only.

Information the site handles today

At the time of writing, the site does not provide user accounts, a contact form, analytics or advertising. You can read the public pages without submitting personal information. Starting the Physics demonstration does send anonymous attempt data to the demo server, as described below.

Like most websites, the hosting provider may process technical request data — such as an IP address, browser information, requested URL and timestamps — to deliver the site, protect it from abuse and diagnose errors. This processing is controlled by the hosting provider's terms and privacy policy.

The site's API also emits structured operational logs for requests and security events. These logs contain a random request identifier, the HTTP method, a route template (such as/api/attempts/[attemptId]), the response status and timing, and an error code if one exists. They do not contain request bodies, query strings, bearer tokens, answers, private answer keys, explanations, email addresses or IP addresses. Rate-limit and manual retention cleanup events are logged only as aggregate metadata.

Browser storage

The site stores a few small preferences in your browser. Your light or dark theme choice is saved locally, and a time-limited local record is used to decide when to show the optional “Install app” prompt and whether you dismissed it. These values stay on your device and are not an account or a profile.

The Physics demonstration test also saves a recovery copy of an in-progress attempt in local storage: the anonymous attempt identifier and bearer token, server deadline, selected answers, review flags, visited questions, current question, revision counters and last server-save time. This lets a refresh or brief interruption reopen the same attempt until its server deadline. The raw bearer token stays in your browser; the server stores only a hash of it. Clearing site data removes the recovery copy, but it does not delete the anonymous server record because the site has no account or identity that could locate it again.

The site's service worker keeps a cache of public pages and assets so that previously visited pages can open while you are offline. This can include the public Physics demo page and its public sample questions. The worker skips API requests, requests carrying authorization or cookies, and responses marked no-store; private answer keys and result responses are not part of the offline cache. Clearing site data in your browser removes these preferences, the local attempt copy and the offline cache. It may reset your theme and install-prompt choice.

Physics demonstration server data

When you start the Physics demonstration, the demo server creates an anonymous attempt. It stores the test and question identifiers, selected answers, review and visited state, current question, revision counters, the attempt start time, server deadline, submission time and reason, the resulting score and answer breakdown, and a hash of the bearer token. The correct answers and explanations are kept on the server and returned only through the authorised result endpoint after the server confirms submission.

This is not an account system, and the attempt is not linked to your name, email address or other profile. Anyone with the raw bearer token and attempt identifier could access that attempt, so do not share the local browser data or use the demo for sensitive information. The demo is a preview, not a secure high-stakes examination.

Attempt records are anonymous and are not linked to an account. A submitted attempt becomes eligible for manual deletion 90 days after submission. An expired attempt becomes eligible 7 days after its server deadline, leaving a recovery grace period. Eligible attempts are not removed automatically: a manual cleanup endpoint can delete them in bounded batches after an explicit administrator confirmation, and it defaults to a dry run. Committed import records and administrative audit records are retained separately. Do not submit personal, sensitive or confidential information through the demo.

Cookies and advertising

No advertising is enabled today. If Google AdSense or another advertising service is enabled in future, Google and its partners may use cookies or similar technologies to serve and measure ads. Before ads are turned on, this policy will be updated and any consent or choice mechanism required for your region will be provided.

We do not sell personal information. We do not invent advertising claims or present a sponsored placement as an exam control.

Third-party links

Pages link to NTA, university and other external websites. Those sites have their own privacy practices. Review their policies before submitting information to them.

How information is used

• To deliver pages and keep the site available and secure.
• To create, save, time, grade and return an anonymous Physics demonstration attempt when you choose to start one.
• To diagnose technical errors and improve performance.
• To understand aggregate site usage if privacy-respecting analytics are added later.
• To respond to messages if a contact channel is introduced.

Retention and security

Retention periods depend on the service involved. Hosting logs are kept according to the hosting provider's configuration and policies; Pages Functions logs are streamed rather than stored. Submitted demo attempts are eligible for manual deletion after 90 days, and expired attempts after a 7-day recovery grace period. Eligible attempts are only removed by an explicit administrator action; no automatic retention job is configured. D1 backups and exports can contain private answer keys and hashed tokens and are restricted to approved operators. The server hashes bearer tokens rather than storing the raw values. Reasonable technical safeguards are used, but no website can promise absolute security. The demo is not designed for sensitive identity or payment information.

Your choices

You can clear browser storage through your browser settings. Doing so removes the local recovery copy and its bearer token, which may make an unfinished anonymous attempt impossible to reopen. Because the site has no account identity, clearing browser data does not delete the anonymous server record. If a feature requires personal information in future, the relevant page will explain the purpose and the available choices.

Changes to this policy

This policy will be updated when the site changes its demo data handling or adds accounts, a contact form, analytics or advertising. The “last updated” date at the top of this page will change accordingly.

Contact

A contact channel is being prepared. Until it is published, use the contact page for the current status and official helpdesk link.