Legal Privacy Policy

How MCQs Mind collects, uses, stores, and protects your information — written plainly, without legal jargon.

PRIVACY

Overview

MCQs Mind ("we", "us", "our") is a Pakistan-based exam-preparation platform. This Privacy Policy explains what information we collect when you use mcqsmind.com, how we use it, who we share it with, and what rights you have over your data.

By using MCQs Mind, you agree to the practices described in this policy. If you disagree with any part, please discontinue use of the platform.

Governing law: This policy is governed by the laws of Pakistan, including the Prevention of Electronic Crimes Act (PECA) 2016 where applicable.
Plain-language summary: We collect only what is necessary to run the platform. We do not sell your data. We do not serve targeted advertisements based on your personal profile. Anonymous analytics help us improve the experience.

Data We Collect

A. Account Information

  • Name and email address (required to create an account)
  • Password stored as a one-way cryptographic hash — never in plaintext
  • Account preferences such as theme selection (light/dark)
  • Date and time of account creation and last login

B. Usage & Activity Data

  • Pages and MCQ topics visited, including timestamps
  • Mock-test scores, subject selections, and completion records
  • MCQ report submissions — content of reports, MCQ ID, and reporter account
  • MCQ submissions — question text, options, answer, and source details
  • Newsletter subscription email (if you subscribe)

C. Technical Data (Automatically Collected)

  • IP address (used for security, fraud prevention, and rate limiting)
  • Browser type, operating system, and device category (desktop / mobile / tablet)
  • Referring URL and search terms that led you to MCQs Mind
  • Session duration, pages per visit, and bounce rate (via Google Analytics)
  • Error logs when features fail to load correctly

D. What We Do NOT Collect

  • Payment details or credit/debit card numbers (no paid features currently)
  • Government-issued ID numbers, CNIC, or passport details
  • Exam-roll numbers or registration details for external exams
  • Precise GPS location (only country-level geo-data via analytics)
  • Contacts, call logs, or other device-level permissions

How We Use Your Data

We use collected information exclusively to operate and improve the MCQs Mind platform:

Cookies & Analytics

MCQs Mind uses cookies and local storage for essential platform functions and anonymous analytics. We do not use tracking cookies for advertising.

Data Sharing

We do not sell, rent, or trade your personal data. Sharing is limited to the following circumstances:

  • Service Providers: Hosting infrastructure (servers) that process data on our behalf under confidentiality agreements. They do not use your data for their own purposes.
  • Analytics: Google Analytics receives anonymised, aggregated usage data. Google's privacy policy governs how they handle this data.
  • Legal Obligations: We may disclose data to law enforcement or government authorities if legally required under Pakistani law or a valid court order.
  • Business Transfers: In the event of a merger or acquisition, your data may transfer to the new entity under the same or stronger privacy protections.
  • Public MCQ Bank: Approved MCQ submissions become part of the public question bank. Only the question content is published — not your name or account details.

Data Retention

We retain your data only as long as necessary for the purposes described in this policy:

Data Type Retention Period
Account Data Until account deletion, then 30 days before permanent erasure
Mock Test Records For the lifetime of your account; deleted with the account
MCQ Reports 24 months after resolution; then anonymised
MCQ Submissions Indefinitely as part of the question bank (content only, not attribution)
Newsletter Emails Until you unsubscribe; then removed within 14 days
Server & Access Logs 90 days for security purposes, then automatically deleted
Analytics Data 14 months (Google Analytics default retention period)

Security

We implement industry-standard security measures to protect your data:

  • All data transmitted between your browser and our servers is encrypted via HTTPS (TLS 1.2+)
  • Passwords are hashed using bcrypt — we cannot recover or read your password
  • Database access is restricted to application servers; direct public access is disabled
  • Security updates and patches are applied on a regular maintenance schedule
  • Rate limiting and CSRF protection are active on all form submissions
  • Server-side input validation prevents SQL injection and cross-site scripting attacks
No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security against all threats. If you discover a security vulnerability, please report it responsibly through our contact channel.

Your Rights

As a user, you have the following rights over your personal data:

To exercise any of these rights, contact us using the details in the Contact section below. We respond to data requests within 7 calendar days.

Children & Minors

MCQs Mind is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If a parent or guardian believes their child has created an account, please contact us immediately and we will delete the account and all associated data.

Users under 18 are encouraged to review this policy with a parent or guardian before creating an account or submitting any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time as the platform evolves or as legal requirements change. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Post a notice on the platform for at least 30 days before significant changes take effect
  • Send an email notification to registered users for changes that materially affect their rights

Your continued use of MCQs Mind after a policy update constitutes acceptance of the revised policy. If you disagree with changes, you may delete your account before the effective date.

Contact & Privacy Requests

For privacy-related requests — including data access, correction, deletion, or policy questions — please reach out through our contact channel with the subject line "Privacy Request" and include:

  • Your registered email address
  • The type of request (access / correction / deletion / export)
  • Any relevant details to help us locate and verify your account