DIFF.MDCAT

DIFF. MDCAT

Privacy policy

Last updated 8 October 2026

DIFF. MDCAT is an independent MDCAT study platform developed by Usman Ubaid. You can use public study material without an account. Signing in enables a profile and saved progress; paid test sessions require separate approval. This policy explains the data involved in those features.

Information we use

  • Account: your email address, display name, account identifier, sign-in provider and, if you choose one, profile image or avatar. Email/password and Google sign-in are handled through Firebase Authentication. We do not receive your Google password.
  • Study activity: quiz attempts, answers, scores, progress, accuracy, quiz titles and timestamps. Unfinished or guest progress may be saved in your browser. For signed-in users, some attempts and leaderboard statistics are synchronized with Firebase/Cloud Firestore, including locally saved attempts when you sign in.
  • Paid sessions: the approved email and student name supplied by the organizer or teacher, session access and expiry, assigned tests, answers, attempt times, scores and review availability. Administrators set teacher enrollment limits; approved teachers can add students to their assigned sessions and handle test and result information there. The site checks access before serving private tests.
  • Optional profile details: a display name, avatar, city or college if you provide or change them. A guest profile may be created on your device.
  • Technical information: hosting and security services may receive IP address, browser/device information, requested pages and error or request logs to deliver and protect the site.

How we use information

We use this data to sign you in, save and resume work, show your results, calculate rankings, manage paid-session access, investigate problems and protect the service. We do not use your question answers to decide admission or academic eligibility.

What other people can see

The leaderboard is public and can show your display name, avatar, optional profile details, rank and aggregated study statistics. Choose a display name that you are comfortable sharing. Your email address and individual quiz answers are not intended to appear there. Paid-session administrators can see participants and results for administration and reporting. Other students should only be able to see their own paid results.

Local storage and cookies

We use browser storage for guest and in-progress quiz data, theme preferences and sign-in state. Firebase or the browser may use storage necessary for authentication. Clearing site data can remove unsynchronized progress, and signing out does not necessarily erase local quiz history. We do not currently use advertising cookies.

Service providers and external links

Firebase/Google provides authentication and data storage; Vercel hosts the site. Their systems may process data where their services operate. The Join WhatsApp link opens a WhatsApp group run outside this site. If you join, other group members may see information associated with your WhatsApp account according to your WhatsApp settings. Their privacy practices are separate from ours.

Payments

Access to certain test sessions may be paid, but this website does not currently collect card, JazzCash or Easypaisa credentials or process student payments. The session organizer handles payment arrangements outside the site and confirms eligibility before access is granted. Avoid sending payment credentials through site forms or quiz answers.

Retention and your choices

We retain account, progress and session records while they are needed to provide the service, resolve disputes and maintain necessary records. We have not set a fixed automatic deletion period. You can clear local data through your browser and edit your display name or avatar in your profile. To request access, correction or deletion of account or stored study information, contact us using the link below. We may need to verify that the request comes from the account holder; removing server data may require an administrator action and may be limited where records must be kept for an active session or legitimate dispute.

Students and account safety

Please use your own account and avoid sharing passwords or private test links. If you are under the age at which you can consent to these services where you live, use the site with a parent or guardian's guidance. We do not intentionally ask students to provide sensitive medical or financial information.

Changes and contact

We may update this policy as features change. The date above identifies the current version. For privacy questions or requests, contact Usman Ubaid. See also our terms of use.