Legal information

This policy explains what data we collect, why we collect it, and how we protect it. The data operator is the Project Administration of Georgetown.

1. Data we process

• Registration: email address, display name and username, and password (stored only in encrypted hash form; we cannot see your password).
• Content: posts, comments, conversation messages, wall posts, polls, and uploaded images (avatar, cover, photos, and images attached to posts).
• Technical data: IP address, browser and device information, and access times, used for security and protection against bots and spam.
• Notifications: when push notifications are enabled, a technical subscription identifier for your device is stored.
• Cookies and analytics: see the “Cookies and analytics” section below.

We do not collect bank-card data or request payment details.

2. Why we process it

• to provide the service: sign-in, publishing, communication, and notifications;
• to maintain security and prevent fraud, spam, and abuse;
• to moderate content and comply with the law;
• to understand how the service is used and improve it through aggregated analytics.

3. Who receives data

We do not sell your data. To operate the service, we use third-party processors that handle limited data:

• Yandex.Metrica — traffic analytics (aggregated statistics; the “Webvisor” user-session recording feature is disabled);
• Resend — delivery of service emails, such as password-recovery links;
• Hosting provider — server hosting and data storage;
• Google Fonts — delivery of interface fonts.

Data may also be disclosed in response to a lawful request from an authorized public authority.

4. Retention and security

Data is stored while your account exists. We use reasonable technical safeguards: password hashing, HTTPS, rate limiting, and bot protection. No internet service can guarantee absolute security, but we take reasonable measures to protect your data.

5. Your rights

• change profile data in Passport settings;
• change or recover your password;
• request deletion of your account and associated data;
• withdraw consent to processing by contacting the Administration.

For data requests, contact us through the “Contacts” section.