Privacy policy

SelfRevise ("we", "us") runs selfrevise.com. We are not part of the Rajasthan Public Service Commission (RPSC), and RPSC has not approved us.

For anything about your personal data, write to support@selfrevise.com. That address also reaches our grievance officer under India's Digital Personal Data Protection Act, 2023.

When you create an account and study, we keep:

• Your account: your name and email address, and your password. We never store the password itself, only a one-way hash of it (argon2id), so nobody, including us, can read it.
• Your study: the tests you make, the papers you attempt, the answers you pick, your scores and when you took them. This is how we show your results and compare them with the cut-off.
• Your plan: whether you have the RAS PYQ Pass, and when it starts and ends.
• Your mobile number, only if you pay with a UPI app or add it to your account: the payment needs one, so we ask once and keep it with your account, where you can change it.
• Your feedback: what you send us from the Feedback page (what it is about and your message), kept with your account so our team can read it and act on it.
• Your sign-ins: for each device you are signed in on, a scrambled (hashed) session code, when it expires, the name of your browser and your IP address. This keeps you signed in, and lets you sign out of every device at once.
• Your devices: for each browser you sign in on, the name it reports ("Chrome on Windows"), the address it was last used from, when it was first and last used, and a code that identifies the browser itself. Your account page lists them, so you can see where you are signed in and sign out a device you do not recognise.
• A fingerprint of your browser: when you sign in, your browser works out one number from things it cannot hide — what its canvas and graphics draw, your screen size, your timezone and which fonts it has — and sends us that number, not those details. It lets us recognise the same browser after you clear your cookies, so you stay one device in that list instead of a new one every time. We use it for nothing else: no advertising, no measurement, no profile of you.
• Basic request records: for each request to our servers, the time, the page or action, whether it worked, how long it took and, if you are signed in, your account number. These records never include what you typed, your password or your cookies.
• How the pages are used: where you click and tap, how far you scroll, and a recording of your visit. Every word on the screen is hidden (masked) before the recording leaves your browser, so it shows the shape of the page and where you tapped, never your email, your answers or your score. Microsoft Clarity does this for us.

We do not ask for your photos, location or contacts. We show no ads, we sell nothing, and we use no advertising or marketing trackers.

A pass is for one person. If one account is used on far more devices than a person has, or in several places at the same time, we pause what the pass opens and email the account.

Nothing is blocked when you sign in, and no account is closed for this. Changing your password lifts the pause at once — it also signs out every other device, which is the point: if your password got out, that is how you take your account back. If you think we got it wrong, write to us and we will restore it.

We judge this only from what is listed above — your devices, their addresses and when they were used. No person reads your study or your answers to decide it, and you can always write to support@selfrevise.com.

Payments are taken by Razorpay, a licensed payment gateway. Your card or UPI details go directly to Razorpay and never reach our servers. If you pay with a UPI app, we also pass Razorpay your mobile number, because the payment needs one. Of a payment we keep only the order and payment reference, the amount, the date and whether it succeeded.

• To run SelfRevise: sign you in, save your attempts and scores, and open what your plan includes.
• To keep it safe: we limit how often an email address or IP address can try to sign in, to stop password guessing and abuse.
• To improve the questions and explanations, using totals across all students, never one person singled out.
• To make the pages clearer: we look at where students click, how far they scroll and where they get stuck.
• To write to you about your account, if we ever need to.

We do not sell your data, show you ads or build marketing profiles of you.

We use only the cookies SelfRevise needs to work:

• access_token and refresh_token keep you signed in. Your browser cannot read them from scripts, they are sent only to selfrevise.com, and they expire after 30 days.
• device_id names this browser among your devices. Your browser cannot read it from scripts either, it is sent only to selfrevise.com, and it lasts two years. Clearing it costs you nothing — you simply appear as a new device the next time you sign in.
• selfrevise-question-lang remembers whether you read questions in Hindi or English, for a year.
• _clck and _clsk are set by Microsoft Clarity, which shows us how the pages are used. _clck holds a random id for a year; _clsk keeps one visit together for a day. Neither holds your name, your email or anything you typed.

Your browser also keeps a few small settings on your device, which are never sent to us: your light or dark theme, whether the sidebar is folded, whether the exam countdown is hidden, your daily question streak, the questions you mark for review during a paper, and the category you compare with the cut-off.

The page font, Google Sans, loads from Google Fonts. Your browser therefore connects to Google, which sees your IP address. Google’s own privacy policy covers that.

A few companies process data for us, only to run the service:

• Vercel hosts the website.
• Railway hosts our servers, database and file storage.
• Google Fonts serves the page font.
• Microsoft Clarity shows us how the pages are used, from masked recordings.

We share data with anyone else only if the law requires it, for example a valid order from a court or a government authority.

Our servers and database are in Singapore.

We keep your account and study history while your account exists. Sign-in records expire after 30 days. We keep request records only as long as we need them to run and secure the service. When you ask us to delete your account, we delete your account and everything linked to it.

Under India’s Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you, and get a summary of it;
• ask us to correct or complete it;
• ask us to delete your account and your data;
• nominate someone to act for you if you cannot;
• complain to our grievance officer, and then to the Data Protection Board of India.

To do any of these, write to support@selfrevise.com from the email address on your account. We will reply within 30 days. You can sign out of every device yourself at any time, from My account.

SelfRevise is for adults preparing for the RAS exam, whose applicants must be at least 21. Please do not use SelfRevise if you are under 18. If we learn that someone under 18 has an account, we will delete it.

Every connection to SelfRevise is encrypted (HTTPS). We store passwords and session codes only as one-way hashes. Our sign-in cookies cannot be read by scripts on the page, and repeated sign-in attempts are limited. No system is perfectly secure, but we work to keep yours safe, and we will tell you if a breach affects your data.

When we change how we handle your data, we will update this page and its date. If the change is significant, we will tell you on the site before it takes effect.