Priors
Privacy policy
Last updated: 13 November 2026
This policy explains what Priors (the website at priorslab.com and the Priors apps for iPhone and Android) collects about you, why, who else sees it, and what you can do about it. Priors is run by Ayush Jain (sole proprietor), Bengaluru, Karnataka, India ("we", "us"), the data fiduciary under India's Digital Personal Data Protection Act, 2023.
Questions, requests and grievances: email hello@priorslab.com. Ayush Jain is the grievance officer.
The short version
- You can play without an account. We keep a random id so your progress sticks.
- If you sign in, we keep your email address to sign you in and save your progress.
- We don't sell your data, show ads, or use advertising or tracking cookies.
- You can delete your account yourself, from your profile, at any time.
What we collect, and why
| What | When | Why |
|---|---|---|
| A display name | When you start playing | To show your name in the header and on duel, tournament and contest leaderboards |
| A random player id, kept in your browser or the app | When you start playing | To keep your progress without an account |
| Your email address | When you sign in (by email link, Google, GitHub or Apple) | To sign you in, keep your progress across devices, rate you in contests, send the daily email if you leave it on, and contact you about your account. From Google, GitHub or Apple we receive only your verified email address (and, from Google or Apple, your name if you share it) |
| Profile details you choose to add: school, graduation year, why you're here, a favourite topic, a one-line bio, an avatar colour, a public handle | If you add them | To show on your profile. A handle makes a public page at /u/your-handle with your contest rating and history, and your school only if you switch that on. It never shows your email. Remove the handle to hide the page |
| Gameplay: gut guesses, answers, hints and steps used, game rounds, scores and personal bests, Drop and Fermi results, duels, tournaments, contest entries and your contest rating | As you play | To run the site: reveals, XP, your progress and profile, crowd histograms (shown only in aggregate, without names) and leaderboards (with names) |
| Contest fairness signals: how long each answer took, whether the tab or app was in the background, pasted answers | During rated contests only | To keep contests fair. Unusual results are reviewed by a person before they change anyone's rating |
| A push notification token, from the iPhone or Android app | Only if you turn on the daily reminder | To send one reminder a day while today's set isn't finished. Turning the reminder off, or deleting your account, removes it |
| Feedback you send, with the page and basic browser details it was sent from | When you use the feedback box | To fix problems. Reports of something broken become a GitHub issue without your name, email or player id |
| Your email, if you subscribe to the newsletter | When you subscribe on Priors (job pages and the job board) | To send you the Priors newsletter. We keep it on our list and pass it to Substack, which sends the newsletter; unsubscribe from any issue |
| Your name, email, CV or LinkedIn link and any note, for one job | When you choose "Apply through Priors" on the job board (only offered for some firms) | To pass your application to that firm, which you agree to on the form. We keep it for 12 months, then delete it |
| Your Learn progress: which lessons you opened and which you finished | As you use Learn (signed in) | To show your progress on each topic |
| A request to hear when a Learn topic or module opens: your email address and what you asked about | If you ask to be told | To email you once, when it opens. If you aren't signed in, we also send that address a sign-in link, so you can finish signing up |
| Enquiries from the For teams page: your name, work email, organisation and message | When you send one | To reply to you |
| If a firm invites you to a screening round: your name and email (from the firm), your answers and timings, whether the tab was hidden or you left full screen, pasted answers, a hashed fingerprint of your device and network address, any extra time you ask for, and webcam pictures only if the firm turns them on and you agree | When you take a firm's round | To run the round for that firm and help it trust the results. Only that firm sees it; it's kept apart from any Priors account and deleted when the firm's retention period ends (at most two years) or when the firm deletes it. Ask the firm, or us, to delete it sooner |
| If you work at a firm that uses Priors for teams: your work email, name, role in the team, and what you do in the dashboard (an activity log your firm's owners can read) | When your firm adds you | To let you into your firm's dashboard and keep a record your firm can check |
| If you ask a probability question on Reddit that we solve on the Community page: your public Reddit username, the subreddit and a link to your post (the post's text is read to solve it but never shown; the page restates the question in our words) | When you post in one of the subreddits we follow | To credit you and link back to your thread. If you delete the post, or it's removed, we delete your username and the post's text within about an hour and take the page down |
| If you buy mock interview sessions: the package, amount, currency, the payment provider's order and payment ids, dates, and the phone number you give at checkout (passed to the payment provider, which requires one; we don't keep it) | When you buy | To add sessions to your account, show when they run out, email your receipt and keep financial records |
| Mock interview bookings, and the written report on each interview (your skill levels, the questions, the interviewer's notes) | When you book and after each interview | To run the sessions, give you feedback and show your progress across sessions. Only you, signed in with the email you booked with, can read your reports |
| Where you came from (a ?ref= or utm_source tag on your first visit) | On your first visit | To know which posts and clubs bring people to Priors, counted in aggregate |
| Technical data: your IP address (held briefly in memory to limit abuse), error reports, and server logs without passwords, sign-in tokens or request contents | When you use the site | Security, abuse prevention and fixing bugs |
Paid features (premium and mock interviews) aren't on sale yet. If you buy something once they are, the payment provider handles your card details; we keep only what was bought, when, and the provider's order and payment ids, to give you what you paid for and keep the records the law requires.
Who else sees it
We use these services to run Priors. Each gets only what it needs for its job:
- Render: hosts the site and its database (servers in the United States).
- Cloudflare: delivers the site to your browser and protects it from abuse.
- Our backup storage provider: keeps encrypted copies of the database so nothing is lost.
- Our email delivery provider: sends sign-in links and the daily email.
- Google, GitHub and Apple: only if you choose to sign in with them; they tell us your verified email.
- Google (Firebase Cloud Messaging) and Apple (Push Notification service): deliver the daily reminder to the Android and iPhone apps, if you turn it on.
- A firm that invites you to a screening round: sees your results, answers, signals and pictures from that round, and nothing else about you.
- Cashfree Payments: processes payments for mock interviews. You give your card or UPI details to Cashfree directly; we receive only whether you paid. We send it your name, email and phone number.
- Cal.com: books your mock interviews; it gets your name, email, an internal account id and what you're preparing for.
- Substack: sends the Priors newsletter, if you subscribe; it gets your email address.
- Umami: counts page visits without cookies and without identifying you.
- Sentry: receives error reports, with sign-in headers, player ids and request contents removed.
- GitHub: holds reports of something broken, filed without your name, email or player id. An AI coding assistant (Anthropic's Claude) may read those reports to suggest a fix.
Some of them process data outside India, including in the United States.
Cookies and storage on your device
We don't use advertising or tracking cookies. Your browser's local storage, or the app's own storage, keeps your player id, your sign-in session, your theme and a few small preferences (such as which tips you've already seen).
How long we keep it
- Your account, profile and play: while your account exists.
- Server logs and error reports: up to 30 days.
- Applications through the job board: 12 months.
- Backups: overwritten within 30 days.
- Purchase records, if any: as long as tax and accounting law requires (up to 8 years).
Deleting your account, and your other rights
You can delete your account from your profile ("Delete my account"), on the website or in the apps. That removes your email address, name, handle, profile details, sign-in sessions, push tokens, contest registrations, the contact details on any feedback you sent, your requests to hear when Learn topics open, your Learn progress, and your daily email setting, and signs you out everywhere. Your past play stays, anonymously, as "Deleted player", so other people's leaderboards, duels and contest ratings don't change; it can no longer be linked to you. Purchase records, if any, are kept without your email where the law requires.
You can also ask us to access, correct or erase your personal data, to stop processing it, or to name someone to act for you, by emailing hello@priorslab.com. We'll reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Security
Sign-in uses one-time links or Google, GitHub and Apple; we never see or store a password. We store only hashes of sign-in and session tokens. Payment and booking notifications are checked with cryptographic signatures, the whole site uses HTTPS, and backups are stored encrypted.
Children
Priors is for people aged 18 and over. If you think a child has given us personal data, email us and we'll delete it.
Changes
When this policy changes, we'll post the new version here with a new date, and email signed-in players about important changes.