Privacy Policy

• Account. Your email address, username and avatar. Your password is held by our authentication provider as a salted hash; we never see it.
• Practice. Your battles (problem, time, outcome), solves and attempts, streaks, review queue, bookmarks, sheet progress and practice objective. If you connect a LeetCode username, the public profile stats we read for it.
• LeetCode session, only if you choose to import your history. If you paste your LeetCode session cookie, or give your LeetCode password, we use it to read your submission history. A password is used once to sign in to LeetCode and is never stored. The session we get back is stored encrypted (AES-256-GCM) and used only to read your history.
• What you write. Notes, approaches, primers, feed posts, discussions and replies, stuck requests and hints, challenges and their messages.
• Social. Squads you create or join, invites and who referred you, people you follow, people you block, and reports you file.
• Notifications. The notifications we send you and whether you have read them, your notification preferences, and, if you turn on push alerts, the push subscription your browser gives us.
• Usage events. Which features you use (for example “battle started” or “challenge sent”), tied to your account and stored in our own database. We do not use third-party advertising or tracking scripts.
• Technical. Your IP address is used in memory to limit how often requests can be made; it is not stored with your account or events. Our hosting providers keep standard server logs.
• On your device. A sign-in cookie, and browser storage for things like a running battle’s timer and battle notes, which stay on that device.

• To run Mahayuddh: sign you in, show your practice, squads, feed and leaderboards, and send you notifications.
• To show your work to the people you choose (see the next section).
• To keep it safe: rate limits, reports, blocking and removing abuse.
• To improve it: we look at usage events in aggregate to see which features help people practise.

Notes and approaches have a visibility you pick: Private (only you), Squad (members of your active squad) or Public. Squad members see the squad’s activity, including solves, challenges, approaches shared with the squad, the member list and the squad leaderboard.

Some pages are public by design and can be opened by anyone with the link, and indexed by search engines: your profile at /u/<username>, public approaches, battle proof cards, public primers, and a squad’s frozen weekly recaps and season results. Posts you make to the global feed and your place on the global leaderboard show your username.

We do not sell your data. We share it only with the services that run Mahayuddh for us:

• Supabase: our database and sign-in.
• Google (Gmail): sends the sign-up confirmation and password-reset emails.
• Vercel: hosts the website.
• Sarathi, the AI practice guide. When you ask Sarathi for help (stuck hints, explain-back, mistake explanations or interview follow-ups), the problem and the text you submit are sent to a third-party AI service, which passes them to the model it selects to write Sarathi’s reply. With the free models we use, the model’s provider may keep that text to improve its service. Do not put personal information in that text.
• LeetCode: we read public data for the LeetCode username you connect, and your history if you give us a session.
• Browser push services (from Google, Mozilla or Apple) deliver push alerts if you turn them on.

These providers may process data outside India. We may also disclose data when the law requires it.

We keep your data while your account exists. When you delete your account, we delete it and the personal data tied to it straight away, unless the law requires us to keep something. Copies that other members made of things you shared with them (for example a note they copied into their own notebook) stay with them. Backups held by our providers expire on their own schedule.

Under India’s Digital Personal Data Protection Act, 2023, you can ask us for a summary of the data we hold about you, ask us to correct or delete it, withdraw your consent, and nominate someone to act for you. You can edit your profile, change the visibility of your notes and approaches, and delete your own posts and notes yourself. To delete your account, go to Profile, then Account, then Delete account; it takes effect immediately. If you can’t sign in, email premsai224k@gmail.com from your account’s address and we reply within 30 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Connections are encrypted (HTTPS), every table is protected by row-level access rules, passwords are hashed and LeetCode sessions are encrypted. No system is perfectly secure. If you find a problem, please email premsai224k@gmail.com.

Mahayuddh is for people aged 18 and over. If you are under 18, do not create an account. If we learn that we hold data about someone under 18 without a parent’s or guardian’s consent, we will delete it.

If we change this policy, we will update the date at the top. For changes that matter, we will tell you in the app or by email before they take effect.

Mahayuddh is run by Prem Sai K (github.com/prem22k). For privacy questions, requests or grievances, email premsai224k@gmail.com. See also our Terms of Service.