Privacy Policy
Last updated 17 October 2026
What we collect, why, who sees it and for how long. The short version: no account is needed for most of the site, we never see your payment details, and nothing you type into an exercise is sent to analytics.
Who is responsible
Excel Practice Sheets (https://excelpracticesheets.com) is run by an individual based in India, who is the controller of the personal data described here. Questions and requests go to ankitagarwalshopify@gmail.com.
What we collect
If you create an account: your email address, the display name you choose, and your password, which is stored only as a one-way hash we cannot reverse.
If you practise while signed in: which exercises you attempt and complete, the answers you submit (the formula, option or key press), how many hints you used, how long an exercise took, your points, streak, skill scores and badges. This is what the dashboard and your recommendations are built from. Signed-out practice is not stored on our servers; only small counters for the current visit live in your browser.
If you buy a practice pack: the checkout runs on Dodo Payments’ own pages, where it collects your email, name, billing country and payment method as the merchant of record. We receive the order number, the pack, the amount and currency, and your email address so we can help with delivery and refunds. We never receive or store card, UPI or bank details.
Usage analytics: which pages are viewed, which exercises are started, completed or failed, whether a hint or solution was used, which practice file was downloaded, and where a checkout was started. Never the text you type, never your email, never your name. We use Google Analytics 4 for this and keep event data for 14 months.
Technical records: our hosting provider keeps short-lived server logs (IP address, browser, pages requested) to run and protect the service.
Email you send us: kept as long as needed to answer and follow up.
Cookies and browser storage
- epp_session — set only when you sign in; keeps you signed in for 30 days. Deleting it signs you out.
- _ga and _ga_* — Google Analytics cookies that tell repeat visits apart; they last up to two years. They carry no name or email.
- Browser storage — a note that you dismissed a banner, counters for the current visit, and a marker that stops a purchase being counted twice if you refresh the thank-you page. None of it leaves your browser.
There are no advertising cookies. You can block or clear cookies in your browser; the site works without them, except that you cannot stay signed in.
Why we use it
- To run the site, save your progress and show you what to practise next.
- To deliver what you bought and help if a download or payment goes wrong.
- To answer you when you write to us.
- To see, in aggregate, which exercises work and which confuse people, so we can fix them.
- To keep the service secure and stop abuse.
- To send service emails about your account and your practice, such as a weekly summary. When these start, every one will carry a way to turn them off.
We do not sell personal data and we do not show advertising.
Who we share it with
- Vercel hosts the site and keeps the server logs.
- Neon hosts the database that holds accounts and practice data.
- Google processes the analytics events described above.
- Dodo Payments processes purchases as merchant of record; its privacy policy governs what it collects at checkout.
Each of these works under its own agreement with us and uses the data only to provide its service. These providers run servers outside India and possibly outside your country, so your data may be stored or processed there. We disclose data beyond this only if the law requires it.
How long we keep it
- Account and practice data: until you ask us to delete your account.
- Analytics events: 14 months, then Google deletes them.
- Purchase records: as long as needed for refunds, accounting and tax, and as Dodo Payments keeps them under its own policy.
- Server logs: a short period set by the hosting provider.
Your choices and rights
Wherever you live, you can ask us what we hold about you, ask for it to be corrected or deleted, ask for a copy, or object to a use of it. Email ankitagarwalshopify@gmail.com from the address on your account; we reply within 30 days. If you are in a place with a data protection authority, you can also complain to it.
Security
The site is served over HTTPS. Passwords are hashed with scrypt, session tokens are stored as hashes, and access to the database is limited to what runs the site. No system is perfect; if you find a problem, please tell us first.
Children
The site is not directed at children under 13, and we do not knowingly keep an account for one. If you believe a child has created an account, write to us and we will delete it.
Changes
When this policy changes, the date at the top changes with it. A change that affects what we do with existing data is announced on the site before it takes effect.