Privacy Policy
Last updated: 28 September 2026
This Privacy Policy explains how Euclideum Solutions Private Limited (“we”, “us”) collects, uses and protects personal data when you use Cognitive Games. We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.
1. Data we collect
- Account data: name, email address, hashed password. We never store plaintext passwords (passwords are hashed with Argon2id).
- Usage data: practice sessions, responses, scores, XP and achievements, and the timezone you practise in: the data required to operate the product.
- Billing data: the passes you bought, their amounts and payment references. Card, UPI and bank details are collected by Razorpay, our payment provider, and never touch our servers.
- Technical data: IP address and device/browser information used for security (rate limiting, abuse and fraud prevention) and service logs.
2. How we use data
- To provide, personalise and improve practice.
- To compute your scores and show them to you.
- To process pass payments and send you receipts and pass reminders by email.
- To secure the Service, prevent abuse and comply with legal obligations.
We do not sell personal data, and we do not use your data to train AI models.
3. Sharing
- Leaderboard: your display name and scores appear to other players. Leave the display name blank to appear as an anonymous player.
- Processors: Google Cloud (hosting, Asia region), Neon (database), Razorpay (payments) and Resend (email). Each processes data under its own safeguards and our instructions.
- Legal: we may disclose data where required by law or to protect the rights, safety and integrity of the Service.
4. Retention
Account and practice data are retained while your account is active, and thereafter as required by tax and accounting law for payment records. You may request deletion of your account; data required by law or for integrity audit trails may be retained in restricted form.
5. Security
We use industry-standard safeguards: encrypted transport (TLS), hashed credentials and session tokens, server-side evaluation of all answers, least-privilege infrastructure access, and audit logging. No system is perfectly secure; report concerns to support@cognitivegames.io.
6. Your rights
Subject to applicable law, you may access, correct or request deletion of your personal data, and withdraw consent where processing is based on consent. Contact us at support@cognitivegames.io; we respond within the timelines required by law.
7. Cookies
We use a single strictly-necessary, HTTP-only session cookie to keep you signed in, and a local-storage preference for your light/dark theme. We do not use advertising or cross-site tracking cookies.
8. Children
The Service is not directed at children under 16.
9. Changes and contact
We will notify material changes to this policy through the Service. Data controller: Euclideum Solutions Private Limited, India · support@cognitivegames.io