Privacy policy & data disclosure

Last updated October 2026

What we collect

• Account data: email address, display name, and a bcrypt hash of your password (your actual password is never stored).
• Data you enter: academic stats (gpa, test scores, certifications, experience), application tracker entries, calendar events, saved decks, quiz attempts, posts, comments, and chat messages.
• Technical data: a login token stored in your browser's localStorage. No analytics, tracking pixels, or advertising cookies.

How it is used

Account data authenticates you. Stats power the school matching you ask for. User content is stored so the features work (your tracker, your calendar) and, for posts and messages, shown to other signed-in users. Posts marked anonymous are shown to other users as anonymous, but are linked to your account in the database for moderation.

Where it lives

The database runs on a personal home server. The frontend is served through Cloudflare, and traffic passes Cloudflare's network. Password reset emails are sent through Resend when configured, which processes your email address for delivery.

Sharing

Your data is not sold and is not shared with advertisers or data brokers. It may be disclosed only if legally required, or to protect the service and its users.

Retention and deletion

Your data is kept while your account exists. To export or delete your account and associated data, email me@ankitsachdeva.com from your account address. Deletion removes your profile, stats, tracker entries, calendar events, and messages; anonymous posts may be retained in anonymized form unless you ask otherwise.

Security

Passwords are stored as bcrypt hashes, traffic is encrypted in transit, and the database is not publicly exposed. No system is perfectly secure; use a unique password and report any issue to the contact below.

Changes

This policy may change; material changes will be noted on this page with a new date.

Contact

Privacy questions and deletion requests: me@ankitsachdeva.com.