Privacy Policy
Last updated: February 2025
1. What we collect
When you register, we collect your email (school or institution only), a password (stored in hashed form), a username you choose, and a profile picture (avatar). We do not display your email to other users or in any public API. We store session data (e.g. your user id, username, avatar) in a signed cookie so you stay logged in.
2. How we use it
Your email is used to verify your account (we send a one-time verification link), to log you in, and to recover or manage your account if we add those features. Your username and avatar are shown next to your reviews. We use standard tools (e.g. database, hosting) to run the service.
3. What others see
Other users and the public can see: location names and details, reviews (rating and comment), and the username and avatar associated with each review. They cannot see your email or who “liked” or reported a review in a way that identifies you personally.
4. Data retention and security
We keep your data while your account exists. We use industry-standard measures (e.g. hashed passwords, secure cookies) to protect your data. No system is completely secure; use the service at your own risk.
5. Your rights
Depending on where you live, you may have rights to access, correct, or delete your data. Contact us (see footer or support email) to request this. We will respond in a reasonable time.
6. Changes
We may update this policy. We will post the updated version here. Continued use after changes means you accept the updated policy.