Privacy Policy

Practice Pāthshālā · Mandee Labs, Hyderabad, Telangana, India

Version 1.4 · Effective 22 October 2026

The short version

This library is for adults choosing practice papers for children. We collect adult account details needed for sign-in and paper access. Optional visitor analytics starts only after you choose Accept all. Permission is specific to this browser and, after sign-in, to your adult account. Rejecting optional analytics does not block the service. There is no advertising, session recording or precise location tracking in this version.

Account and service information

We store your email, authentication identifier, password hash when using email sign-in, and dated adult/Terms/Privacy confirmations. Google sign-in supplies the account email and identifier. We do not send passwords, Google credentials or authentication tokens to analytics. Supabase provides account authentication and paper storage; Vercel hosts this service. Essential storage maintains sessions and remembers preferences. Normal hosting and security logs may include technical request information such as IP addresses; this is separate from optional analytics.

Paper access records

When a signed-in account successfully prepares a PDF, we record the account identifier, paper identifier and server time so we can support paper access and report library use. These are necessary service records, separate from optional PostHog analytics. A record means the PDF was prepared; it does not prove that it was saved or printed. Only authorized operators can view these records. We retain them for up to 90 days, then remove them. Earlier downloads cannot be reconstructed.

Optional usage analytics

When you choose Accept all, we count visits using a random browser identifier and send fixed events, approximate country, region and city, browser family, device category and event time to PostHog EU. Events are page opened, library opened, paper preview opened, account signed up and paper prepared. These help us understand use and improve the library. We derive approximate location from hosting geolocation information and browser/device categories from the request; we do not add raw IP addresses, full user-agent strings, GPS coordinates, email, names, answer content, uploaded work, authentication details or full URLs to analytics events. Optional analytics code is loaded from PostHog EU assets after permission; those technical requests necessarily process connection information. No advertising, autocapture or screen recordings are enabled.

A browser identifier lasts at most 30 days. A visit ends after 30 minutes without activity. Different devices, cleared storage and shared browsers affect the counts, so a unique browser is not necessarily a person. Signed-out browsing is not merged into an adult account when someone signs in; optional account analytics needs fresh permission. Optional analytics stays off on question/answer, legal and authentication screens.

When permitted, signup and PDF-preparation events may include those optional dimensions. Basic signup totals and necessary PDF-handout records remain separate and continue without optional analytics. An old grant for the earlier basic analytics does not permit the expanded data; the updated notice asks for fresh permission.

Your choice and withdrawal

Accept all permits the usage analytics described above. After sign-in, fresh permission is needed for that account. Accept necessary and Reject all both leave optional analytics off; essential storage still applies when you use sign-in and paper access. Change your choice through Cookie settings in the footer. Giving permission for one account does not give permission for another.

Withdrawal stops new optional collection in this browser immediately. Once the withdrawal is saved, server checks prevent new delivery for your account. We queue deletion of optional events for the withdrawn browser/account identifier from PostHog and verify provider completion. If saving fails, the interface explains that other devices may still have permission and offers retry. An earlier identifier is never reused for a new grant after withdrawal. Minimal permission records are kept separately to demonstrate and respect your choices.

Children

Adults must operate their own accounts. Do not use a child's account or provide a child's name, school, age, answers, work or photographs. We do not create child profiles or intentionally track children. An adult declaration does not verify every browser user's age. Contact us if a child has used an account or child information was submitted so we can investigate and remove it where appropriate. New interactive child-data features require separate safeguards before release.

Contact messages

Messages sent through our contact form go through our hosting service and configured email provider to Mandee Labs. We use the supplied email and message to respond. Please do not include child information or sensitive records. Contact-message retention follows the need to handle your request and any justified legal obligations.

Providers, storage and security

Supabase stores service data in its configured India region. PostHog optional events use EU Cloud, outside India. Vercel and service providers may process operational data in their infrastructure locations. Providers act under their applicable service/data-processing terms. We restrict access, use encrypted connections, keep privileged credentials server-side and review security incidents. We do not sell personal data or share it for advertising.

Retention and deletion

Account information remains while your account is active, subject to justified legal retention. Optional analytics is kept only for the stated improvement purpose. Identifiers expire after 30 days, stop collecting and are queued for provider erasure by the daily worker. Withdrawal and account closure also queue erasure. Provider completion is verified separately; queueing does not prove physical deletion is complete. PostHog's plan determines the available event query window; that window alone is not a guarantee of physical deletion. We verify deletion separately and do not promise an untested automatic 12-month purge. There are no recordings to retain in this launch. Permission evidence and essential security/legal records may be retained separately for legitimate compliance purposes, with access restricted.

Requests and concerns

Write to crew@mandeelabs.com to request access, correction or account deletion, or raise a privacy concern. We may verify account ownership before acting. Account closure also initiates the external analytics deletion process. We explain any information that must be retained for legal obligations. Optional consent can be withdrawn directly through Cookie settings.

Policy updates

We update this policy when our practices change and show the updated version and effective date. Before starting a new optional use of your personal data, we explain that use and ask for your permission. You can decline optional analytics and continue using the service. We do not apply new optional purposes to previously collected personal data without a valid basis and any required permission.