Privacy Policy

This policy explains what PlayCloudLabs collects, why, who else handles it, and what you can ask us to do with it. Shubham Maurya (Marathahalli, Bengaluru, Karnataka, India) is responsible for your data, as the data fiduciary under India’s Digital Personal Data Protection Act, 2023.

1. What we collect

• Your account: your name and email address. If you sign up with a password, it is stored hashed by our sign-in provider — we never see it. If you sign in with GitHub or Google, we receive the name and email on that account.
• Your practice: the designs you build, the answers you choose, your scores, the descriptions you write for your own designs, the reviews written for them, and whether you marked a review accurate, with any reason you gave.
• Payments: Razorpay handles your card, UPI or bank details. They never reach us, and we do not store them. We keep the order and payment reference, the plan, the amount and the date.
• Technical: the cookies that keep you signed in, and the basic request logs (such as IP address and browser) our hosting provider keeps for security. To count how many people visit, we keep a one-way hash of your IP address for each day you visit, with the page you arrived on and the site that sent you — never the address itself, and nothing that says who you are.
• Feedback you send without an account: the words and the page you were on are kept. If you also give an email address so we can reply, that address, and the visitor code described below, are deleted 15 days after you send it.
• What you do on the site: so we can see where people get stuck, we note which pages you open, which challenge and mode you use, and when you submit an answer, with the score. These notes are tied to a random code kept in a cookie in your browser, and the code is not your name or your IP address. If you later sign in, the notes from that browser are joined to your account, so we can see your journey from first visit to your plan. They are kept for 180 days. If your browser sends the Global Privacy Control or Do Not Track signal, we set no such cookie and keep no such notes.

2. How we use it

• To run the service: sign you in, score your designs and write your reviews.
• To give you the access you paid for, and keep a record of the payment.
• To send account emails — confirming your address, resetting your password.
• To prevent fraud and abuse, and enforce the daily limits.
• To answer you when you contact us, and to meet legal and tax obligations.

We do not sell your data, and there is no advertising or ad tracking on the site.

3. Who else handles it

Only the providers the service runs on, each for its own part:

• Supabase — database and sign-in. Your data is stored in its Mumbai region. Their privacy policy.
• Vercel — hosting. Requests may be processed outside India, including in the United States. Their privacy policy.
• Razorpay — payments. Their privacy policy.
• Brevo — sending account emails. Their privacy policy.
• Google — only if you choose to sign in with Google. Their privacy policy.
• GitHub — only if you choose to sign in with GitHub. Their privacy policy.
• An AI model provider — to write reviews, it receives the scenario, your design and any description you wrote. It does not receive your name or email address, so please do not put personal information in a description.
• Authorities — when the law requires us to, and only what it requires.

4. Where your data is

Your account and practice history are stored in India, in Supabase’s Mumbai region. Some providers above — hosting, email, the AI model, and GitHub or Google if you use them — process data outside India, including in the United States, under their own safeguards.

5. Cookies and local storage

We use the cookies that keep you signed in, and one more of our own: a random visitor code that lets us follow what happens on the site from one page to the next (see section 1). It is not shared with anyone and is not used for advertising; we use no advertising or third-party tracking cookies. Your browser’s local storage holds conveniences such as panel sizes and the design you are part-way through; that stays on your device. A design you give a name and save is kept on our servers instead, so it is there on any device you sign in from — you can delete it yourself at any time. Blocking cookies in your browser will sign you out.

6. How long we keep it

We keep your account and practice history while your account exists. You can delete your account yourself at any time from your account page. If you have an active paid plan, the deletion is scheduled for the day that plan ends, so you keep the time you paid for; you can also cancel a scheduled deletion before then. Otherwise it happens straight away.

When your account is deleted, we remove your personal data — your practice history, saved designs and profile. Two things are kept, and only these: your payment records, for as long as tax and accounting law requires; and your email address with the date of deletion, so a payment record can still be tied to whoever made it and to guard against fraud. We do not keep it for marketing, and we never use it to contact you again.

7. Your rights

You can ask us to:

• show you the personal data we hold about you, and give you a copy of it;
• correct anything in it that is wrong;
• delete it, by deleting your account from your account page (see section 6 for what happens to a paid plan and what we are required to keep);
• stop using it where you gave consent — which also means deleting your account.

Write to us at the address below. We reply within 30 days. Grievance officer: Shubham Maurya, support@playcloudlabs.com.

8. Security

Data travels encrypted, passwords are stored hashed, and access to the database is limited to the server. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.

9. Children

The service is not meant for anyone under 18 without the consent of a parent or guardian. If you believe a child has given us personal data without it, tell us and we will delete it.

10. Changes

We may update this policy. The date at the top shows the latest version, and we will email you about any significant change.

11. Contact

• Name: Shubham Maurya
• Email: support@playcloudlabs.com
• Phone: +91 88517 20358
• Address: Marathahalli, Bengaluru, Karnataka, India