Privacy Policy

Last Updated: June 6, 2026

Welcome to ExamNagar. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy policy, or our practices with regards to your personal information, please contact us.

1. Information We Collect

We collect personal information that you voluntarily provide to us when you log in to ExamNagar using your Google Account, or when you interact with our features. This includes:

• Identity Data: Full name, Google Profile picture (avatar), and Google account unique identifier.
• Contact Data: Google account email address and your voluntarily-provided WhatsApp mobile number.
• Session Metadata: IP address, browser type, device information, and activity logs to support session token rotation and security.

2. How We Use Your Information

We use the information we collect to operate, manage, and secure our services, including:

• Authentication: Facilitating secure sign-in and account access via Google OAuth.
• Exam Notifications: If you choose to provide your WhatsApp number, we use it to send you instant alerts regarding your admit card releases, schedules, and exam center details.
• Security & Maintenance: Monitoring session logs to prevent unauthorized access and manage JWT session expirations.

3. Cookies and Session Storage

ExamNagar uses highly secure, HTTP-only, and SameSite cookies to manage access tokens (`en4_at` / `__Host-en4_at`) and session refresh tokens (`en4_rt` / `__Host-en4_rt`). These cookies cannot be read by third-party scripts, shielding your session from Cross-Site Scripting (XSS) attacks. They automatically expire based on server settings (up to 6 months for refresh sessions).

4. Data Sharing and Third Parties

We values your privacy and do not sell, rent, or trade your personal information with third parties. Your data is only shared with:

• Google Identity Services: To securely sign you in.
• MongoDB Atlas: Our secure database hosting infrastructure.

5. Data Security

We implement standard, modern security measures to safeguard your credentials. This includes encrypting transit data via HTTPS, storing refresh token secrets in MongoDB as cryptographically secure SHA-256 hashes, and enforcing token rotation policies. However, please remember that no transmission over the internet is 100% secure.

6. Your Rights

You can manage your account and choose to skip providing a WhatsApp number at any time. If you wish to delete your account or revoke ExamNagar's access to your Google Account, you can do so through your Google Account Settings or by reaching out to our support team.

7. Contact Us

If you have any queries regarding this Privacy Policy, please contact our support desk.