Privacy Policy

Scope and who CSS Vista is

CSS Vista is an independent educational website for competitive-examination preparation in Pakistan. This policy describes the data practices of css-vista.com and the account, study and advertising features delivered through it. CSS Vista is not the Federal Public Service Commission (FPSC) or another government body.

Information you provide

When you create an account, CSS Vista asks for a name, email address and password. Passwords are handled by the authentication system and are not displayed to other users. Depending on the feature you use, you may also provide profile information, answers, notes, selected subjects, study-planner data, quiz or mock-test activity, evaluation requests, test-series request details, or other information you deliberately enter into a study tool.

Study progress and browser storage

CSS Vista is local-first. The browser stores a record under cssvista:v1 that can include quiz results, saved answers, bookmarks, completed challenges, visit streaks, subject progress, study plans, tasks, quick notes, goal checklists, evaluation-request drafts, test-series-request drafts and spaced-revision state. Navigation scroll position and short-lived password-reset throttling information can also be kept in session storage. If you sign in and use sync, supported progress is associated with your private account so it can be restored across devices.

Authentication and security data

The current Hostinger-hosted account backend uses secure session and CSRF cookies. A normal signed-in session is designed to last up to 14 days unless it is revoked or expires. The backend also processes a shortened IP-network prefix and a cryptographic hash derived from the browser user-agent for login security, session validation and rate limiting. Security-event records may contain hashed email, IP-prefix and event information. Administrator verification uses an additional short-lived secure cookie.

Account authentication, verification and password recovery are processed by the CSS Vista backend hosted on Hostinger. Verification and reset emails use the configured Hostinger mail transport. Recovery links expire and can be used only once.

Server and technical information

Like ordinary web hosting, requests can expose technical information such as IP address, browser/user-agent, requested URL, time and response status to the hosting and security infrastructure. CSS Vista uses this information to deliver the site, protect accounts, diagnose failures, control abuse and maintain availability. We do not describe ordinary server logs as a student profile unless they are actually linked to an account or security event.

Advertising and Google

CSS Vista uses Google AdSense on eligible substantial public content pages. A small set of signed-in account overview, progress and MPT overview pages may request one clearly separated in-page unit near the bottom, but those private routes do not enable Auto Ads or vignette ads. Sign-in, registration, password recovery, active questions, timed assessments, MPT entrance and exam screens, mistakes review, document viewers, legal pages and unfinished or utility-only pages are excluded from CSS Vista advertising eligibility. CSS Vista does not pass profile fields, answers, scores, study plans or account details as advertising parameters. Google and other third-party vendors may use cookies, web beacons, IP addresses or similar identifiers in connection with ad serving. Google states that third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this and/or other websites, and that Google's advertising cookies enable Google and its partners to serve ads based on visits to sites on the Internet.

Users can manage Google ad personalization through Google Ads Settings. Google's explanation of how it uses information from partner sites is available at How Google uses information from sites or apps that use its services.

Consent in regulated regions

For visitors in the European Economic Area, United Kingdom and Switzerland, Google requires publishers serving personalized advertising to use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. Where a Google Privacy & Messaging message applies, visitors can accept, reject or manage available choices and later reopen the message through the site's Privacy & Cookie Settings control. CSS Vista does not treat a visitor's choice as a shared cacheable page response.

Analytics and other third parties

The audited application source does not currently include a Google Analytics or Google Tag Manager tag. If analytics are added later, this policy and consent configuration must be updated before relying on that processing. External services currently visible in the platform include Google AdSense, Hostinger hosting/infrastructure, Instagram, YouTube, WhatsApp links and official-source links such as FPSC. Opening an external service makes that service's own privacy terms applicable to the interaction.

How information is used and shared

Information is used to operate accounts, sync study progress, provide requested tools, secure the platform, prevent abuse, send account-security or password-reset messages, troubleshoot the service, and display advertising on eligible pages described above. CSS Vista does not publish a student's private account progress as public content. Data may be processed by service providers that are necessary to provide hosting, authentication, email delivery or advertising. CSS Vista does not state that personal information is sold.

Retention and your choices

Browser-stored study data remains until it is cleared by the user, replaced by the application or removed with browser/site-data controls. Account and synced study records are retained while needed to provide the account, maintain security, satisfy legitimate operational records or resolve abuse and support issues. Security records may be retained separately from visible study data. You can use the website without signing in for features that support guest mode, clear browser storage through browser controls, sign out to revoke the current session, and use the Privacy & Cookie Settings control where a Google consent message applies.

Children

CSS Vista is designed for competitive-examination preparation and is not intentionally directed to young children. Users should not submit personal information on behalf of a child unless they have the lawful authority to do so. If CSS Vista becomes aware that information has been collected in circumstances requiring deletion or additional consent, it will address the issue through the available contact channel.

International processing

Some service providers, including Google and Hostinger, operate infrastructure in multiple countries. Information handled by those providers may therefore be processed outside Pakistan under their applicable contractual and legal arrangements.

Changes and privacy questions

This policy will be updated when material data practices change. For privacy questions or requests, use the verified channels on the Contact CSS Vista page. Do not send passwords, authentication codes or other account secrets through social messaging.