đź”’ STUDENT DATA PROTECTION

Privacy Policy

Last updated: November 2026 · Committed to transparency, student data protection, and 100% free access.

Our Core Privacy Commitment

PlacePrep was built by developers who believe placement preparation should be accessible to all students without financial strain or predatory practices. We treat your personal data with utmost respect:

  • âś“ No selling of student emails or profiles
  • âś“ No sale of student data for advertising
  • âś“ Camera feeds never leave your browser
  • âś“ Full account deletion upon request

1. Who We Are

PlacePrep (“we”, “us”, or “our”) operates placeprep.me, an independent, open placement aptitude practice platform designed for college and university students. For queries related to data privacy and protection, our contact email is support@placeprep.me.

2. Information We Collect

We collect only the minimum information necessary to provide an authentic, rewarding mock examination experience:

A. Account Credentials & Profile

When you sign up, we collect your full name, email address, and a secure bcrypt-hashed password (or your verified Google email and display name if you authenticate via Google OAuth). During onboarding, you may optionally share your college name, graduation year, and degree branch to help calibrate target percentiles.

B. Assessment Attempts & Analytics Data

When you complete mock exams and topic drills, we store your question selections, time spent per question, marked reviews, sectional scores, and topic mastery history. This data powers your personal recommendations dashboard so you know exactly which weak areas to drill.

C. Community Question Submissions

If you contribute memory-based or original placement questions via our Community module, we store the question text, options, answer key, explanation, and an author identifier to manage moderation, report queues, and contributor rankings.

D. Audit & Security Logs

We log login timestamps, IP addresses, and request rates to protect students against brute-force attacks, session hijacking, and server abuse.

đź“·

3. Camera & AI Proctoring Privacy Guarantee

In Full Mock Exam mode, PlacePrep provides a proctoring simulation environment designed to mimic real corporate online assessments (such as Mettl, Wheebox, or Talview).

Zero Server-Side Media Processing

When you grant camera access for face and gaze tracking:

  • 100% Client-Side Execution: All video frames are processed locally inside your web browser using WebAssembly via Google MediaPipe FaceMesh.
  • Never Streamed or Uploaded: No camera recordings, screenshots, photos, audio tracks, or facial biometric models are ever sent to PlacePrep servers or any third-party infrastructure.
  • Volatile Memory Only: Video frames exist in temporary GPU/RAM memory for landmark estimation and are immediately discarded on the next render frame.
  • What Reaches Our Server: Only high-level event counters (e.g. “no face detected for > 3 seconds”, “multiple faces”, or “tab switch”) are sent to your attempt log, mirroring how corporate proctoring counts warning limits.

4. How We Use Your Information

We process personal and test data strictly for the following purposes:

  • Providing and managing your user account and authentication sessions.
  • Scoring tests and rendering performance percentiles and topic breakdowns.
  • Generating recommendations to help you focus on your lowest-accuracy topics.
  • Enforcing test integrity rules during simulated mock exams.
  • Detecting platform abuse, automated bots, and unauthorized access attempts.
  • Keeping the free platform available, including displaying limited advertising in designated non-exam areas if we introduce ads in the future.

5. Cookies & Local Storage

PlacePrep currently uses cookies for authentication sessions, CSRF security, preferences, performance diagnostics, and recording user consent preferences. We do not currently run advertising cookies or personalized ad tracking. If advertising is introduced, we will identify the provider and cookie purposes, request any required consent before setting non-essential advertising cookies, and provide a way to withdraw that consent. For an itemized list of all cookies and to customize your choices, please review our Cookie Policy.

6. Infrastructure & Third-Party Services

We rely on trusted, industry-standard infrastructure providers to host PlacePrep securely:

  • Supabase (PostgreSQL): Used as our managed database backend with strict Row Level Security (RLS) policies ensuring students can only read and write their own attempt records.
  • Google Identity Services: Used optionally if you choose to authenticate with Google.
  • Advertising providers (future): We may use a carefully selected advertising provider in limited, non-exam areas to help fund free access. No advertising provider will receive camera frames, face landmarks, answers, or assessment records. The provider and its data practices will be disclosed before activation.
  • Encrypted TLS / HTTPS: Handled by Caddy with automated SSL/TLS certificates and HSTS security headers.

7. Your Rights & Choices

Regardless of your geographic location (including under India's Digital Personal Data Protection Act and international privacy frameworks like GDPR), you possess the following rights regarding your data:

  • Right to Access: You can view all your past mock exams, practice sets, and analytics directly from your dashboard.
  • Right to Correction: You can update your profile details anytime.
  • Right to Deletion: You may request the permanent deletion of your user account, attempt logs, and personal information by emailing us at support@placeprep.me.
  • Right to Withdraw Consent: You can manage or revoke cookie preferences anytime via our .

8. Changes to This Policy & Contact

We may update this Privacy Policy from time to time to reflect platform improvements or regulatory changes. Any updates will be published on this page with a revised “Last Updated” date.

For any questions, concerns, or requests regarding this Privacy Policy, please email our team at support@placeprep.me.