This policy explains what personal data Sarkari Master — Demo (“we”) processes when you use this website, why we process it, how long we keep it and what you can do about it. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”). We only use your data for the purposes written here, and where we rely on your consent you can withdraw it at any time.
Without an account, most things stay on your device
You can read every post and use the candidate tools without an account. The details you enter to check your eligibility (date of birth, category, qualification and so on) are checked in your own browser and are not sent to our server. They are kept on your device only if you tick “Remember my details on this device”, and “Forget my details” removes them. Saved posts, follows and My Exams of a visitor without an account are also kept only on the device.
Site statistics
We count page views with our own cookieless statistics. To count a visitor once per day we make a short code from the IP address and the browser with a key that changes every day, so the same person cannot be recognised on another day. We keep only daily totals, never a list of the pages you visited.
Your account
An account is for people who are 18 or older; sign-up asks you to confirm this. For an account we keep your name, e-mail address, a secure hash of your password (none if you only use Google or an e-mail code), the date you confirmed you are 18 or older, your optional picture and time zone. If you sign in with Google, Google tells us your Google account ID, name, e-mail address and whether Google has verified it — never your Google password. For your security we keep the browsers you are signed in with and a login history (browser, operating system and the first part of the IP address). A two-factor secret is stored encrypted and recovery codes only as hashes.
What you choose to keep in your account
- Follows, saved posts and My Exams are kept with your account so they are the same on every device. An application number you add to My Exams is stored encrypted and never appears in a calendar.
- Your eligibility profile is kept in your account only if you agree to “Keep my Meri Naukri profile in my account”. It is stored encrypted. Only if you also agree to “Alert me about new jobs my profile is eligible for” do we use it for alerts.
- You can see every consent with its date, and withdraw it, in Account → Privacy & data. Withdrawing the profile consent deletes the account’s copy of your profile.
Alerts
You choose the channel of each alert, and each one needs your own consent: e-mail (only after you click the confirmation link we send), browser notifications (your browser asks your permission), Telegram (after you start our bot), WhatsApp or SMS (with the consent box). We store the address of each channel — e-mail address, browser push address, Telegram chat or mobile number — encrypted, and our staff see it only masked. Your date of birth and profile never go into an alert. Every alert has a link to stop it; Telegram also stops with /stop, and signed-in visitors can stop channels in Account → Alerts. Sign-ups that were never confirmed are deleted after 7 days, stopped subscriptions after 30 days and the delivery log after 90 days.
Questions, answers and problem reports
When you ask or answer a question under a post, we keep your text, the name you give (optional) and the language. Questions are shown only after our team has read them, with the name you gave. An e-mail address is asked only if you want one e-mail when your question is answered; it is stored encrypted and deleted after that e-mail (or after 90 days without an answer). For votes and “Was this page helpful?” we use a cookie with a random code and, for that day only, a keyed code of your IP address and browser, deleted after two days. Problem reports are never shown publicly; handled reports are deleted after 180 days. We do not keep IP addresses for these.
Service centres
Job pages can show service centres (CSC, e-Mitra, cyber cafés) that fill forms. Centres are independent businesses. When you choose to contact one, we first ask for your consent; only then do we record a lead: the centre, the post, WhatsApp or phone, the time, the consent wording you agreed to and a keyed code of your IP address. A name or mobile number is stored only if you type it, encrypted, and shown masked; names and numbers are removed from leads after one year. Your message itself goes from your own WhatsApp or phone to the centre, which then has your number like any contact. The centre’s own handling of your data is its responsibility. Centre owners: the details you enter for your listing are shown publicly once we approve the centre.
Contact form and support
Messages you send through the contact form (name, e-mail address, subject, message, IP address and browser type) are kept so we can answer you and protect the form against abuse. We may turn a message into a support ticket. Tickets keep your messages and the files you attach, which only you and our support team can open.
Payments
If you buy a membership or another product, the payment is handled by the payment provider you choose (for example Razorpay, PhonePe, PayU, Stripe or PayPal) or by a UPI transfer. We never see your card details or UPI PIN. We keep what we need for the receipt, the GST invoice and our accounts: amounts, dates, the plan or product, your name and e-mail address, and the mobile number, state and GSTIN you give on the order form; for a manual UPI payment also the UTR and the screenshot you send, which only our admins can see. These records are kept as long as tax and accounting law requires, also after an account is deleted (without the link to the account).
Cookies and storage on your device
- Session cookie (gxt_session) — set when you sign in or send a form; keeps you signed in and protects forms against forgery.
- “Keep me signed in” (gxt_remember) — only if you choose it; up to 30 days.
- Trusted device (gxt_2fa_device) — only if you choose “Don’t ask again on this device” at the two-factor step; 30 days.
- Ad consent (gxt_consent) — only where ads from other companies are shown; remembers your choice for about six months.
- Announcement (gxt_announce), lite mode (gxt_lite), votes (gxt_qv) and centre reviews (gxt_cv) — remember that you closed an announcement, switched on the data saver, voted, or reviewed a centre.
- Your browser’s storage — your light/dark theme, your remembered eligibility details, your saved posts, follows and My Exams, the ticks of a document checklist and your currency on the pricing page. They stay on your device; signing out removes the copies that belong to your account.
Advertising
If ads are shown, they may come from Google AdSense. A consent banner lets you accept or reject personalised ads; until you accept, only non-personalised ads are requested (or, depending on the site’s setting, none from Google). Google and its partners may use cookies to show ads, limit how often you see them and prevent fraud. You can change your choice at any time with “Cookie settings” at the bottom of every page. Ads are never shown in your account, at checkout, in lite mode or to members of an ad-free plan who are signed in.
Who else receives data
Only the companies that run parts of the service for us, each only for its task: our hosting provider, the e-mail service that sends our e-mails, the services that deliver alerts (browser push services, Telegram, WhatsApp and SMS providers), the payment providers and Google (sign-in with Google, ads). Search engines are told the addresses of new pages, never anything about you. If our editors use an AI service to prepare posts, it receives official notices and our own texts, never visitors’ personal data. We do not sell personal data.
How long we keep data
Account data stays until you delete your account. The other periods are written in each section above. Short-lived technical server logs are kept only as long as needed to keep the service secure and working.
Your rights
Under the DPDP Act you can ask for a summary of your personal data, have it corrected, completed or updated, have it erased, withdraw a consent as easily as you gave it, nominate someone to act for you, and have a grievance addressed. Most of this you can do yourself: Account → Privacy & data shows your consents and downloads all your account data as a file; Account → Profile corrects your details; Account → Delete account deletes the account with its follows, saved posts, My Exams, profile and alert channels; every alert has a link to stop it. For anything else, write to us.
Children
Accounts are for people who are 18 or older. Younger visitors can use the site without an account, with everything kept on their own device. We do not knowingly keep personal data of children in accounts; if you think a child has made an account, please tell us and we will delete it.
Security
The site uses an encrypted connection. Passwords are stored only as secure hashes, and alert addresses, profiles, application numbers and other secrets are stored encrypted. Staff see contact details masked. You can turn on two-factor authentication for your account.
Grievances and contact
For any question, request or complaint about your personal data, write to our grievance contact at demo-owner@getxtra.in or use the contact form. We will answer as soon as we can and within the time the law allows. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Changes
When we change this policy, the date at the top of this page changes too. If a change affects how we use data you gave us with your consent, we will ask for your consent again.