Privacy Policy

Account data from Google sign-in: your name, email address, and profile image. We use this to create and identify your account.

Profile data you provide: the public username (handle) you choose, and any comments or questions you submit.

Usage data: which questions you open, mark as done, bookmark, or vote on, so we can show your progress and recommend what to study next. We also keep aggregate counts such as question views.

Google Analytics data (only with your consent): if you accept analytics cookies, Google Analytics collects standard usage information such as pages viewed, approximate location (from IP), and device and browser type, to help us understand and improve the site. If you decline, Google Analytics does not collect this data.

First-party browser analytics (only with your consent): our own event system records page visits and product interactions using a random browser identifier stored in local storage. When you are signed in, events can be linked to your account. GPU Lab events include launches, mission and step identifiers, hints, completion, approximate active time, and counts of commands and errors. They do not include terminal command text, answers or file contents. These records help us find usability problems and understand whether product use is followed by a purchase. The same analytics choice controls these browser events and Google Analytics. Declining stops optional browser collection. Necessary records for accounts, purchases, saved progress, security and requested services remain separate.

Payment data: when you buy access, our payment providers (Razorpay, PayPal) process the transaction. We receive a confirmation and a reference, the amount, and the access window. We do not receive or store your full card number or UPI credentials.

To provide the Service: authenticate you, unlock the content you are entitled to, save progress and bookmarks, and run discussions.

To operate and improve the product: understand which questions are useful, prevent abuse and fraud, and provide support.

To communicate with you about your account, purchases, or support requests. We do not sell your personal data.

Marketing emails are optional. Your account preference covers new questions and prep tips. The weekly newsletter, book notification and ambassador updates each have their own choice; joining one does not subscribe you to the others. Checkout promotions are paused.

Public email signups require confirmation through your inbox. We store your address, subscription source and status, unsubscribe token, and records of confirmed choices so we can honor your preferences. A request alone does not restore an unsubscribed address.

Use the unsubscribe link in a marketing email, or the unsubscribe-all control in your account, to stop all marketing emails. You do not need to sign in to use an email's unsubscribe link. Receipts, essential account and access emails, and replies to your requests continue. Resend processes email addresses and message content to deliver these emails.

You need a free account to apply for an internship. We link your application to that account and collect your name, contact email address, location, availability, explanation of your fit and a résumé sharing link, along with your consent and the application date. We use this information to assess your application, contact you about the role and prevent abuse. Applying does not subscribe you to marketing.

Your application and résumé link are available only to authorized reviewers through the site. We send your responses and the link to our recruitment inbox using Resend, which processes this information to deliver the email. Our server does not open, download or scan the linked document. The file stays with the sharing service you choose, under its privacy policy and the access settings you control. Reviewers may open the link to assess your application. Previously uploaded résumés remain private and may be attached to their original queued notification.

Please leave out identity documents, financial details and other sensitive information that is not needed for your application. Contact [email protected] to correct or withdraw an application or request deletion. Deleting your account removes linked applications, résumé links and any previously uploaded résumés from the site. It does not delete files from your chosen sharing service; you can remove those files or revoke sharing there. Applications submitted before sign-in was required have no account link; include your application email address when asking us to remove those records. Recruitment records and emailed copies are reviewed for removal when they are no longer needed; sent emails must be removed separately, and copies in backups remain subject to the backup retention cycle.

If you join the ambassador program, we store the post links, post text and optional screenshots you submit for LinkedIn and X, along with your reviewer note, review decisions, reward history and optional newsletter consent. Only you and authorized reviewers can access your proof through the site. Screenshots are resized and stripped of image metadata. Do not include private messages or other people's personal details.

An approved ambassador badge appears on your account and beside your public comments. Your proof and review notes are not published. We retain the application and reward record while your account exists to administer the program and prevent duplicate rewards; deleting your account deletes this record and its screenshots.

We send application-status emails when your ambassador application is approved, declined or its approval is withdrawn. The ambassador newsletter and event updates are optional and do not affect eligibility. Change this preference in your ambassador space. Sharing buttons open LinkedIn or X, which process your activity under their own policies; we never post to those accounts automatically.

Where the GDPR applies, we rely on: performance of a contract (to deliver access you purchased), legitimate interests (to secure and improve the Service), consent (where required, e.g. certain cookies), and legal obligation (e.g. tax records).

Where India's Digital Personal Data Protection Act, 2023 applies, we process your personal data for the lawful purpose of providing the Service you have signed up for, with your consent given at sign-up.

Strictly necessary cookies are always on: we use them for authentication and session management (to keep you signed in) and to remember your theme preference. The site cannot function without them, so disabling them will prevent sign-in from working.

Optional browser analytics use both cookies and local storage. Accepting enables our browser event system and Google Analytics. Declining prevents these systems from starting. If you withdraw after accepting, we disable further collection and remove their browser identifiers where the browser permits it. This does not affect access, sign-in, purchases or saved progress, and does not automatically erase data already collected. Use the control at the end of this page to change your choice. We do not enable Google Ads tags through this analytics choice.

This choice covers our browser event system and Google Analytics. Our delivery provider, Cloudflare, also processes network requests for delivery and security and may collect performance measurements. Those provider settings are separate from this browser control.

Reddit advertising has its own optional choice. Accepting site analytics or email updates does not enable it. If enabled and accepted, the Reddit Pixel in your browser and our server’s Reddit Conversions API report public page visits, content views, searches, new accounts and confirmed Premium purchases to measure how our Reddit ads perform. Search text, lesson bodies, form contents, payment credentials and private account URLs are not included.

We use a random advertising identifier and, when present, Reddit’s ad click ID to match events. Reddit also receives browser network and device information through the Pixel, including IP address, user agent and screen dimensions. Purchases include the amount, currency and product. We do not send your account email, phone number or account ID to Reddit. Reddit processes received data under its own privacy policy.

Your advertising permission and attribution record expire after 30 days. Queued events expire after 24 hours, including retries, and are removed during scheduled cleanup. You can decline using the control below; that removes this browser’s advertising identifiers where possible and cancels queued events when the server receives the choice. Requests already in flight and data already received by Reddit cannot be recalled by this control. Contact us about previously collected data. A browser Global Privacy Control signal keeps Reddit measurement off.

Service providers who help us run the product: our hosting provider, Google (for authentication and, only with your consent, Google Analytics), and payment processors (Razorpay, PayPal). Each only receives what it needs for its function, and your use of Google Analytics data is also subject to Google's own policies.

If you submit a question and we publish it, the question text (and, if you were signed in, your public handle) may appear publicly on the site and in our open-source question repository. Do not include anything private or confidential in a submission or comment.

We may disclose data if required by law, or to protect our rights, users, or the Service.

We keep account data while your account is active. Payment records are kept as long as required for tax and accounting law. Published contributions may remain on the site after account closure, in line with the licence in our Terms. You can ask us to delete your account; we will remove personal data that we are not legally required to keep.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to withdraw consent, and to complain to a data-protection authority. To exercise any of these, contact us using the details below and we will respond within the time required by applicable law.

We use reasonable technical and organizational measures to protect your data, but no method of transmission or storage is completely secure and we cannot guarantee absolute security. To the maximum extent permitted by law, we are not liable for any unauthorized access to, alteration of, or loss of data that occurs despite our use of reasonable measures, and the limitation of liability in our Terms & Conditions applies to this Policy.

Our providers may process data in countries other than yours; where required we rely on appropriate safeguards for international transfers.

Accounts and purchases are intended for people aged 18 and over. Public learning material may be read without an account; this age policy concerns accounts and purchases, not the suitability of the educational content. If you believe a child has provided personal data, contact us so we can review and address it.

This Policy is governed by the laws of India, and the courts at Bengaluru, Karnataka, India have exclusive jurisdiction over any dispute relating to it, subject to any mandatory data-protection or consumer rights that apply to you and cannot be waived.

We may update this policy; the “last updated” date reflects the latest version, and your continued use of the Service means you accept the current version.

For any privacy request or question, use the contact form on the site or email [email protected].