Privacy Policy

Last updated: 4 November 2026 · The Gliders Nest

What personal data we collect, why, and the rights you have under the Digital Personal Data Protection Act, 2023.

1. Who we are

The Gliders Nest (owner: Aaryan Goswami) is the Data Fiduciary for personal data processed through Prime Minister — The Nation Is In Your Hands at https://preppai.online/. This policy is published in line with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. Data we collect

• Account data: full name, email address, mobile number, a securely hashed password, and the date you accepted our Terms.
• Google sign-in data (only if you use it): your Google account ID, name and verified email address. We never receive your Google password.
• Game data: your saved governments, choices, scores, endings unlocked and settings.
• Security data: IP address, device and browser type, sign-in times, and verification-code attempts, used to protect your account.
• Payment data (when paid features launch): order ID, amount, Credits purchased, and the payment status returned by Razorpay. We never collect or store your full card number, CVV, UPI PIN or net-banking password — these are handled directly by Razorpay, a PCI-DSS compliant payment gateway.
• Communications: messages you send to agxcreates@gmail.com.

We do not knowingly collect sensitive personal data such as health, biometric or financial account details.

3. Why we use it

• To create, verify and secure your account, and to send one-time codes and sign-in alerts (based on your consent and to perform our contract with you).
• To provide the Game, save your progress and show leaderboards (contract).
• To process purchases, issue receipts and prevent fraud (contract and legal obligation).
• To send feature news, offers, updates and announcements, only if you opted in (consent; withdraw any time).
• To comply with law, respond to lawful requests and enforce our Terms (legal obligation and legitimate use under section 7 of the DPDP Act).

4. Consent

By registering you give clear consent for us to process the data listed above for the purposes listed above. Marketing consent is separate and optional. You may withdraw consent at any time by deleting your account or writing to agxcreates@gmail.com; withdrawal does not affect processing already carried out.

If you are under 18, we process your data only with verifiable consent from your parent or guardian, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at you.

5. Who we share it with

We do not sell your personal data. We share it only with service providers acting on our instructions (Data Processors), under confidentiality obligations:

• our web hosting provider (to run the website and store data);
• our email delivery service, configured through FluentSMTP (to send emails from pmgame@nbmail.in);
• Google (only if you choose Google sign-in);
• Razorpay Software Private Limited (to process payments, once launched);
• government authorities, courts or law-enforcement agencies, when legally required.

6. Where and how long we keep it

Your data is stored on secured servers. Some providers may process data outside India, which the DPDP Act permits except to countries the Government restricts.

• Account and game data: for as long as your account is active. It is erased when you delete your account.
• Unverified registrations: verification data is discarded automatically after 10 minutes.
• Security logs: up to 180 days (or as required by CERT-In directions).
• Payment and invoice records: 8 years, as required by tax and accounting laws, even after account deletion.

7. Security

Passwords are stored only as salted hashes. Verification codes are stored only as cryptographic hashes and expire after 10 minutes. We use HTTPS, rate limiting, sign-in alerts and access controls. No system is perfectly secure; if a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

8. Your rights

Under the DPDP Act you have the right to:

• access a summary of your personal data and how we process it;
• correct or update your name and mobile number (your email address is your permanent account identity and cannot be changed);
• erase your data, which you can do yourself instantly by deleting your account in the Game;
• withdraw consent and opt out of marketing emails;
• nominate another person to exercise your rights in the event of your death or incapacity;
• raise a grievance with our Grievance Officer, and then with the Data Protection Board of India.

Write to agxcreates@gmail.com to exercise any right. We will respond within 30 days.

9. Cookies

We use essential cookies for sign-in and security, and local browser storage for game settings. See our Cookie Policy.

10. Changes

We will email you about material changes to this policy before they take effect.

11. Contact and grievance officer

Grievance Officer: Aaryan Goswami, The Gliders Nest. Email: agxcreates@gmail.com. We acknowledge grievances within 48 hours and resolve them within 30 days.