Privacy Policy

Information used by the portal

The application stores account details such as name, email, role, account status, password hash, optional profile image path, and two-factor authentication settings.

The application also stores practice attempts, answers, scores, bookmarks, rationale reviews, trophies, messages, question flags, and admin audit records.

How information is used

Student activity is used to show results, performance reports, study recommendations, trophies, and attempt history.

Administrators use account, practice, message, and flag information to operate the portal, review question quality, provide support, and maintain the question bank.

Uploads

Students may upload a profile image. Uploaded images are used for account display inside the portal and can be replaced or removed from the Profile page.

Security

Passwords are stored as hashes. Password reset tokens are stored as hashes and expire. Two-factor recovery codes are stored as hashes.

Administrators should configure HTTPS, secure cookies, backups, and production email delivery before using the portal in production.