We collect your email, your payment confirmation from Razorpay, and basic usage data so the daily feed reaches you. We do not sell, share, or rent your data to anyone. We do not run ad networks or third-party trackers on the paid pages. If you want your data deleted, email defactoias.com@gmail.com and we will delete it within 30 days.
pibtracker.com is a service operated by Aditya Tiwari Sir under the De Facto IAS umbrella, with editorial review by Umang Sultania. The legal entity behind the subscription (relevant for invoicing and refunds) is De Facto IAS, registered in India. For all privacy questions write to defactoias.com@gmail.com.
| Category | What | Why |
|---|---|---|
| Account data | Email, password (hashed), full name (optional), GSTIN (optional) | To log you in, send daily/weekly emails, generate GST invoices |
| Payment data | Razorpay payment ID, ₹ amount, invoice number, payment method (UPI/card/netbanking last 4 digits) | To confirm subscription, send invoice, process refunds. Card numbers and UPI handles never touch our servers — they live with Razorpay. |
| Product usage | Which pages you view, which PRIDs you save or mark read, which ministries you've subscribed to alerts for, last-login time | To show you "your saved" list, deliver ministry alerts, and improve the editorial filter over time |
| Email engagement | Whether the daily/weekly email was opened (optional pixel) | To understand which days have high engagement, refine the 10 PM timing. You can disable email tracking in My account. |
| Technical logs | IP address (truncated after 24 hours), browser type, request timestamps | Standard security and abuse prevention; 24-hour retention then anonymised |
We do not collect: phone number (unless you opt into SMS trap-watch alerts), social media handles, physical address (beyond what Razorpay needs for GST invoices, which we do not store directly), exam scores, coaching institute affiliation, or any personal details unrelated to running the subscription.
Three third parties, listed in full:
We do not share data with: advertisers, data brokers, coaching institutes, social media platforms, or any other third party not listed above. We have no plans to.
We use one session cookie to keep you logged in. We do not use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or any other third-party tracking script. On the paid pages (daily feed, weekly digest, etc.) the only cookie is the session cookie. On public pages (home, backtest, methodology) the only additional cookie is from Cloudflare for security.
The Digital Personal Data Protection Act 2023 gives you the right to:
Active accounts: data retained for the duration of your subscription plus 12 months (to support renewals and re-subscriptions). Cancelled accounts: data deleted on request, or auto-deleted 24 months after the last interaction. Logs: 24 hours, then anonymised. Payment / GST records: 7 years (statutory).
Passwords are stored hashed (bcrypt). All connections to pibtracker.com are over HTTPS. We do not have a physical office, so there is no on-prem server to break into; the database sits on Cloudflare D1 with their standard encryption-at-rest. If we ever detect a breach affecting your data, we will notify you by email within 72 hours and tell you exactly what was exposed.
pibtracker is built for UPSC aspirants in India. Subscribers outside India are welcome but the service, billing, and grievance redressal all happen under Indian law and the DPDP Act 2023. We do not specifically target children under 18 — if you are under 18, we expect a parent or guardian has consented to the subscription.
If we update this policy, we will email subscribers at least 14 days before the new version takes effect, with a clear summary of what changed and why. The full revision history is available on request.
All privacy questions, grievances, and data-deletion requests: defactoias.com@gmail.com. We reply within 30 days, usually within 1.