1. Information We Collect
In order to provide precision-engineered test simulations, adaptive spaced repetition scheduling, and hybrid campus management, Bullet.quest collects the following categories of data:
- Identity & Contact Credentials: Full name, official email address, mobile phone number, chosen username, password hash (encrypted using PHP standard
PASSWORD_BCRYPT/Argon2id), and optional profile avatar. - Academic & Telemetry Data: Target competitive examinations (UPSC CSE, State PSC, Banking PO, SSC, Defence), course enrollment history, test attempt scores, time taken per question, question revisit counts, flashcard confidence ratings (Again / Good / Easy), and accuracy diagnostics.
- Technical & Log Information: IP address, device fingerprints, operating system, browser user-agent, session timestamps, and campus terminal access records.
- Communications & Queries: Messages transmitted via faculty doubt forums, helpdesk inquiry dispatches, and password recovery verification OTP requests.
2. How We Utilize Your Data
Your personal and academic data is processed strictly for legitimate educational, operational, and diagnostic purposes:
- Adaptive Cognitive Scheduling: Powering our SuperMemo-2 (SM-2) memory decay algorithms to determine the optimal day and hour for your flashcard revisions.
- All-India Performance Analytics: Computing percentile benchmarks, national rank predictions, and category-wise strength/weakness heatmaps.
- Security & Anti-Cheating Telemetry: Verifying test engine integrity, preventing concurrent account sharing, and detecting automated scrapers.
- Operational Alerts & Password Recovery: Dispatching transaction receipts, security OTP codes, and critical course updates via verified email and SMS gateways.
- Superadmin Activity Monitoring: Significant account events (such as logins, password updates, and support submissions) are logged to notify our administrative oversight desk at
bulletquest18@gmail.com.
3. 15-Minute Session Inactivity Timeout Policy
To ensure the security of aspirant credentials—particularly when studying in shared library environments, hybrid campus terminals, or public cyber cafes—Bullet.quest enforces a strict 15-Minute Session Inactivity Timeout (900 seconds).
If no active input (keyboard strokes, mouse movements, or touch navigation) is detected within 15 continuous minutes, the platform will automatically invalidate your active session and redirect you to login.php?expired=1. Unsaved draft answers are continuously auto-cached in local browser storage to prevent loss of test progress.
4. Data Security & Encryption Standards
All data transmitted between your browser and our servers is protected using industry-standard 256-bit Transport Layer Security (TLS 1.3 / HTTPS) encryption. Databases are secured behind tactical firewalls with parameterized SQL statements (PDO Prepared Statements) to completely mitigate SQL injection vectors.
Sensitive credentials like passwords and authentication tokens are never stored in plain text. Session tokens are generated cryptographically using bin2hex(random_bytes(32)) and protected with HttpOnly, Secure, and SameSite=Lax cookie flags.
5. Your Rights as a Data Principal (DPDPA 2023)
Under the Indian Digital Personal Data Protection Act and international privacy charters, you maintain full authority over your data:
- Right to Summary: You may request an export of all your academic records, test attempts, and personal identifiers.
- Right to Correction & Updation: You can edit your profile details, contact number, or exam preferences directly from your Aspirant Mission Control.
- Right to Erasure / Account Deletion: You have the right to request permanent anonymization and deletion of your profile and test telemetry by emailing our Data Protection Officer.
- Right of Grievance Redressal: In case of unresolved privacy concerns, you may escalate directly to our dedicated grievance channel.
6. Data Protection Officer (DPO) & Contact
For questions, data export requests, or privacy concerns regarding Bullet.quest and IEPL Academic Systems, please reach out to our designated Data Protection Officer: