Design Mocktail

Design Mocktail

Privacy Policy

Last updated: June 2026

This policy explains what data we collect when you use Design Mocktail, why we collect it, where it is stored, and the controls you have. We follow the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.

1. What we collect

Account information

  • Name and email address (required to create an account).
  • A hashed password if you sign up with email, or a Google identifier if you sign up with Google.
  • An optional phone number if you choose to add one for support contact.

Activity

  • Tests you start, answers you submit, and scores we compute for you.
  • Resources you download or purchase.
  • Page views with anonymous traffic source (referrer, UTM tags) for high-level analytics. Site-wide page views are also collected by Google Analytics 4 (see section 3).

Technical

  • Approximate geographic location (country, region, city) inferred from your IP address by Vercel.
  • Device type (mobile, tablet, desktop) inferred from your browser.
  • A session cookie that keeps you logged in.

Payments

Payment is processed by Razorpay. We receive a payment confirmation and an order identifier; we do not see or store your card number, UPI ID, or banking details on our servers.

2. Why we collect it

  • To run your account and give you access to what you bought.
  • To score your tests and show your results.
  • To send transactional emails (welcome, password reset, purchase confirmation).
  • To understand how the platform is used, in aggregate, so we can prioritise improvements.

We do not sell your data. We do not run advertising or retargeting trackers. We do not share your information with marketing partners.

3. Where it lives

Account data and activity are stored in a managed PostgreSQL database hosted by Supabase. Application logic runs on Vercel. Email delivery uses Resend. Paid PDFs are hosted on Cloudinary with signed download URLs. Aggregate site traffic (anonymous page views, referrer, approximate location, device type) is collected by Google Analytics 4; Google Analytics does not receive your name, email, or purchase details, and IP addresses are not stored (Google Analytics 4 truncates IPs before logging by default).

Vercel, Cloudinary and Google Analytics may process traffic via their global edge networks, including locations outside India. Personal data is processed under the security standards published by each vendor.

4. How long we keep it

  • Account data: as long as your account is active.
  • Test attempts and scores: as long as your account is active, so you can review past performance.
  • Payment records: at least seven years, for tax and accounting compliance.
  • Anonymous page-view logs (Google Analytics 4): up to 14 months, per the retention setting configured in the GA4 property.

5. Your rights

You can:

  • View your profile and purchase history any time from the Library and Settings tabs.
  • Ask us to correct any inaccurate information.
  • Ask us to delete your account and personal data, subject to legal record-keeping requirements for payments.
  • Export your test attempts and purchase history by emailing us.

To exercise any of these rights, write to TODO: contact email from the email address on your account. We respond within seven working days.

6. Cookies

We use a session cookie to keep you logged in, a small amount of local storage to remember UI state like the cookie banner dismissal, and Google Analytics cookies (typically _ga and _ga_*) to measure aggregate site traffic. There are no advertising or retargeting cookies.

7. Children

Design Mocktail is built for design entrance exam aspirants, typically aged 17 and above. If a parent or guardian believes a child under 18 has signed up without consent, write to us and we will close the account and delete the data.

8. Changes to this policy

We may update this policy as the product evolves. Material changes will be highlighted on the site. The "Last updated" date at the top of this page always reflects the most recent revision.

9. Contact

Privacy questions or data requests: TODO: contact email. We aim to respond within seven working days.