Privacy policy & disclaimer

Last updated 30 September 2026. Scam Ya Sach is run by Netras, the cyber security venture of Assurex, for Cyber Security Awareness Month.

1. Your name, answers and certificate

Your answers and score are worked out on your device, and the certificate image is drawn there too. It only leaves your device if you share or download it. After that, the app you shared it with handles it under its own privacy policy.

If you score 7 or more and enter your name to claim a certificate, we record that certificate in the Netras certificate register: your name, score, tier, edition, the date and the credential ID. This is so anyone you share it with (an employer, a colleague, LinkedIn) can check on our certificate page that it is genuine. The screen tells you this before you enter your name. If you would rather not be in the register, don't claim a certificate; the game itself works the same.

If you score below 7, or never enter a name, nothing about you is recorded.

Challenge links contain your name and score (for example ?by=Rahul&sc=8), and dare links contain the names you enter (for example ?for=Papa&from=Rahul), so the person you send them to sees a personal message. Anyone with the link can see these names.

So you don't see the same messages again, your browser remembers which ones it showed in your last two games, in its own local storage. That list never leaves your device.

2. Contacting Netras (opt-in only)

The result screen has an unticked box: "Have Netras contact me about awareness training and security testing." Only if you tick it and send the form do we store your name, work email and, if you give it, your company, so that Netras can reply. Leave the box unticked and nothing is sent. You can ask us to delete this at any time.

3. Security log (includes your IP address)

Like most websites, our server keeps a short access log so we can tell real visitors from bots and block abuse. For each request to our small API we record your IP address, the time, your browser's user-agent string, the country our hosting provider reports, and which kind of event it was. Our legal basis is our legitimate interest in keeping the site working and free from automated abuse.

This log is:

• Deleted automatically after 30 days.
• Kept apart from the certificate register and contact requests, and not combined with them to profile you.
• Not reachable from this website at all. It can only be read by Netras staff who hold credentials to our AWS account, on a dashboard that runs on their own computer. There is no page or address on this site that returns it.
• Used only for security and abuse prevention: never for advertising, profiling or sharing with anyone else.

4. Statistics

To show the "people have taken the test" total and to learn which scams fool people most, the site sends small anonymous events when you open the page, start or finish a game, or share. We store only totals, for example "120 visits today, 80 from phones" or "the KYC message was answered wrongly 40 times". For each visit or game we count the country, the device type, the browser family, how you arrived, the deck you chose, and for finished games the score and which messages were shown and missed.

These totals hold nothing that identifies you: your address is not part of them, and they are stored separately from the security log described above. To count unique visitors, your browser keeps the date of your last visit in its own local storage; we only receive "first visit today: yes/no". No advertising or third-party tracking is used. Fonts are loaded from Google Fonts.

5. Your choices and rights

You can ask what we hold about you, ask for it to be corrected, or ask us to delete your certificate record or contact details. Write to us through the contact link below with your name or credential ID. The security log deletes itself after 30 days.

6. Disclaimer

• Scam Ya Sach is an educational game to help people recognise common scams. It is not legal, financial or professional advice.
• All messages, phone numbers, web addresses, names and characters (including "Bunty") are fictional. Phone numbers are deliberately masked and lookalike web addresses are made up.
• Where a real organisation or service is mentioned (for example a bank, the police, TRAI, a courier or a software company), it is only to show how scammers impersonate them. Scam Ya Sach, Netras and Assurex are not affiliated with or endorsed by them.
• Scams change constantly. When in doubt, contact the organisation yourself through its official app, website or the number on your card.
• If you have been scammed, call 1930 (National Cyber Crime Helpline) or file a complaint at cybercrime.gov.in as soon as possible, and inform your bank.
• The website is provided "as is", without any warranty.

7. Contact

Questions about this page: assurex.co/contact-us. If we change how the site handles data, we'll update this page and the date above.