Privacy Policy • GK Assam - Mock Test Portal

Last Updated: October 2026

At GK Assam ("we", "our", or "us"), we prioritize the privacy and security of our students and candidates. This Privacy Policy outlines how your personal information is collected, utilized, and safeguarded when you visit or practice on our website.

1. Information We Collect

Google OAuth Login Information: When you choose to authenticate via Google Sign-In, we receive only your public profile details granted by Google OAuth: your full name, verified email address, and avatar image. We never request, access, or store your Google password, contacts, Google Drive files, or any private data.
Standard Account Information: If you register directly with email and password, we store your name, email address, optional contact number, and a one-way cryptographically hashed password.
Test Attempt & Performance History: When you complete mock examinations, we record your test scores, selected option answers, completion times, and pass/fail outcome to maintain your personalized candidate history and solution review.
Server Technical Logs: For server protection, DDoS prevention, and rate-limiting, our server automatically logs standard technical data such as IP address and browser type.

2. How We Use Your Information

To operate the interactive Computer-Based Test (CBT) engine and calculate immediate scores and negative marks.
To maintain your candidate profile and personal "My Tests" historical review archive.
To send essential administrative communications, password reset instructions, or critical exam announcements.
To monitor system integrity and prevent automated bot misuse.

3. Zero Third-Party Sharing Guarantee

We respect candidate confidentiality. We do not sell, rent, trade, monetize, or disclose your personal details, email addresses, or academic test history to commercial advertisers, third-party marketing brokers, or data analytics aggregators.

4. Cookies & Local Sessions

GK Assam uses strictly functional, lightweight HTTP session cookies (e.g., GK_ASSAM_SESS) solely to keep you signed in securely during your practice session. We do not deploy invasive third-party cross-site advertising cookies.

5. Data Security & Password Encryption

All candidate passwords are encrypted using industry-standard one-way cryptographic hashing algorithms (password_hash() with Bcrypt). Even system administrators cannot view your plain text password.

6. Your Data Rights

Candidates maintain full control over their account data. You may inspect or modify your account profile at any time in Account Settings, or request the permanent deletion of your account and test history by emailing aitumormail@gmail.com.