Privacy Policy

This policy explains what AurbitX (aurbitx.com), run by CyberNestX Private Limited ("we", "us"), collects, why, and what you can do about it. We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

The short version

• You can play every game without an account. Then we store nothing about you on our servers.
• If you sign up, we keep a username, a doodle avatar, your city (optional), your scores, ideas and votes.
• Your WhatsApp number is never stored in readable form. We keep a scrambled (salted hash) version to recognise you, plus its last two digits.
• We don't sell your data, show ads, or use tracking cookies.

What we collect

When you play without an account

Your progress, streaks and settings are saved only in your own browser (local storage). You can clear them any time from your browser settings.

When you sign up or sign in

• WhatsApp verification: you send a one-time code from your WhatsApp to our WhatsApp Business number. We receive your number from WhatsApp, turn it into a salted hash, keep the last two digits, and discard the rest.
• Profile: an automatically generated username and doodle avatar (you can change both), and your city if you choose to add it.
• Passkeys: if you add one, we store only its public key. Your fingerprint or face data never leaves your device.
• Sign-in session: a random token kept on your device so you stay signed in. We store only a hashed copy.

When you use the site

• Scores: which questions you answered (first attempt only), the points and the month, for the monthly leaderboard.
• Suggestion box: ideas you post and your up or down votes.

When you contribute to Mission Dus

• The amount, date, and the optional name and note you choose to show.
• Payments are processed by Razorpay. Your UPI ID, card, bank and PIN details go to Razorpay and your bank. We never see or store them; we receive only a payment reference and status.

What is public

Your username, avatar, city (if added), leaderboard points, ideas and vote counts, and your contribution total with any name and note you chose are shown publicly on the site. Your phone number is never shown.

Why we use it

• To create and secure your account and keep you signed in.
• To run the leaderboard, suggestion box and supporters list.
• To process and record contributions, and to meet legal and accounting duties.
• To prevent abuse, such as fake accounts or score spamming.

We process this data with your consent, which you give by signing up or contributing, and you can withdraw it by deleting your account.

Who else handles it

• Cloudflare hosts the site and database.
• Meta (WhatsApp) delivers the verification message you send.
• Razorpay processes payments.
• jsDelivr, cdnjs and Google Fonts deliver map data, code libraries and fonts, and see your IP address when your browser loads them.

Each of these handles data under its own privacy policy. Some may store data outside India.

How long we keep it

Account data is kept until you delete your account. Contribution records are kept for as long as Indian tax and accounting law requires (generally 8 years), with your account link removed if you delete your account. Unused sign-up codes are deleted within an hour.

Your rights and deleting your data

• Delete your account: open your profile on aurbitx.com and choose "Delete my account". This removes your profile, scores, ideas, votes, passkeys and sessions immediately.
• To access, correct or delete your data any other way, or to raise a complaint, email us at [email protected]. We reply within 30 days.

Children

AurbitX is meant for UPSC aspirants. If you are under 18, use it only with a parent's or guardian's permission, and don't make payments without their consent.

Grievance officer

Grievance Officer, CyberNestX Private Limited, Sonipat, Haryana, India. Email: [email protected].

Changes

If we change this policy, we'll update this page and the date at the top.