Privacy policy
Last updated 2 November 2026
This policy explains how Virakti EdTech ("we"), handles personal data in Python Quest at virakti.in. We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. What we collect
- Account: name, email or institution-issued login ID, institution name, and a salted hash of your password (never the password itself).
- Device identity: a random device ID stored in your browser, and a one-way hash of browser and hardware traits (browser type, operating system, screen size, time zone, graphics renderer). Used only to enforce the device limit; we do not use it to track you across other websites.
- Learning data: modules opened, levels cleared, medals and quest results.
- Integrity signals: blocked paste or copy attempts, time spent away from a quest, unusual typing bursts and signs of browser automation. We do not record your screen, camera, microphone or keystrokes' content.
- Purchases: order amount, items, currency and Razorpay order/payment IDs. Card, UPI and bank details are collected and processed by Razorpay, not by us.
- Bulk enquiries: the contact details you submit on the institutions page.
- Technical: IP address and approximate country, processed by our hosting provider for security and to show prices in the right currency.
2. Why we use it
To run your account and deliver what you bought; enforce the device limit and protect content; show you and (for institution accounts) your institution your progress and integrity report; process payments and refunds; reply to enquiries; prevent fraud; and meet legal and tax obligations. We do not sell personal data and we do not use advertising trackers.
3. Who processes it for us
- Cloudflare, Inc. — hosting and database;
- Razorpay Software Pvt. Ltd. — payments;
- Google Fonts — web fonts (your browser requests fonts from Google's servers).
Some of these providers may process data outside India, under their own safeguards. If your account was issued by an institution, that institution can see your progress and integrity signals.
4. Children
If you are under 18, we process your data only with verifiable consent from a parent or lawful guardian, or through an institution that has obtained that consent. We do not track children for behavioural monitoring or advertising beyond the integrity signals described above, which exist to support fair assessment.
5. Cookies and storage
We use a secure session cookie to keep you signed in, and a device-ID cookie/local-storage entry to recognise your device. Both are essential; there are no analytics or advertising cookies.
6. How long we keep it
Account and learning data: while your account is active and for up to 12 months after it is closed. Integrity signals: up to 18 months. Purchase records: 8 years, as required for tax and accounting. Enquiries: up to 24 months.
7. Your rights
You may ask to access, correct or erase your personal data, withdraw consent, or nominate someone to exercise your rights. Write to [email protected]. You may also complain to the Data Protection Board of India.
8. Grievance officer
Grievance Officer, Virakti EdTech, Mathura, Uttar Pradesh 281004, India · [email protected]
Effective 2 November 2026. We will post changes here and, for significant changes, notify you by email.
Questions about this page? Write to [email protected].