PRIVACY & PRACTICE TERMS · 29 OCTOBER 2026

Your work stays yours.

What this service stores

Accounts contain email and a salted scrypt password hash. A session cookie identifies your private work. Attempts store answers, timestamps, approximate active question time and results in SQLite on the hosted Railway service. Saved interview/GD text and self-review checkboxes are stored separately from analytics.

Retention and controls

Guest sessions expire after seven days; inaccessible guest records and associated activity are purged on server startup after seven days. Account work is retained until you delete it. Delete saved practice text from My practice, or delete your full account with your password. Local backup copies, if made by the operator, require separate deletion; no automated backup service is connected.

Optional device-only recording

Interview/GD recording requires explicit microphone/camera permission. Media stays in temporary browser memory and is never uploaded by the studio. Playback and download are optional. Discard or leaving the page clears the studio recording; downloaded files require separate deletion. Transcription runs only when on-device browser support is confirmed; no cloud recognition fallback is used. Language-pack downloads require an explicit action. Transcript text is sent to the server only if copied into the answer form and explicitly saved or submitted for optional AI feedback. Video observations are a self-review checklist, not automatic posture or personality inference.

Optional AI Interview/GD coaching

Each request requires consent to send the displayed answer and selected exercise/theme, programme/topic and any explicitly included background notes through the app to OpenAI. Recordings, your email, other attempts and journal history are excluded. The app does not store AI input or feedback in its database; it retains an account/session identifier, request time, kind, model, status and token counts to enforce usage limits. Metadata older than seven days is removed at startup or the next AI availability check. Account deletion removes associated request metadata. Feedback exists in the page until you leave or discard it; downloads require separate deletion. API requests set store:false; provider abuse-monitoring retention is separate and may include content for up to 30 days under the provider policy. OpenAI data controls. AI feedback can be wrong and does not verify facts or predict admission. No media-based or personality assessment takes place.

No marketing or data sales

Optional transcript-only AI coaching is separate from recording and journal saving. Optional Google Analytics is available only after visitor permission. Answers, scores, transcripts and account identifiers are excluded. Use Analytics choices to decline or withdraw, and read Analytics privacy. Interview/GD device drafts are opt-in, stay in this browser and expire 24 hours after the last saved edit; expired drafts are removed when you next open the site. Discarding a draft, successful saving, sign-out and account deletion clear it. Do not use device drafts on shared devices for sensitive information. Verification/reset mail is kept in an operator-only local outbox unless the operator configures email delivery. The outbox and expired tokens are purged after their short retention window on startup. Events store event name, account/session identifier, an allowlisted acquisition category and time; they exclude personal answer text. Student details are not sold or shared with admissions partners.

Prices and content

All prices are proposals. Real sales are disabled; there is no completed tax or refund policy. Sample questions and guides await expert review. No rank, percentile or admission probability is inferred from sample practice.

Service limitations

MockPapers is operated under the Hridaan Labs brand and hosted over HTTPS on Railway. Questions await independent review; paid services and automated email recovery are unavailable. Each portal has separate progress. Device cookies identify guest work; clearing a cookie removes access without deleting the stored records. Use the deletion controls first. A published support contact and a broader retention policy remain to be finalised.