Privacy Policy

1. Introduction

ExamArchive ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit ExamArchive at examarchive.dev.

2. Information We Collect

We may collect the following types of information:

• Account information: When you register, we collect your email address, display name, and username.
• Profile data: Avatar image, role, XP, streak, and upload history.
• Uploaded content: Exam papers and syllabi you submit, along with associated metadata (course, year, institution).
• Usage data: Pages visited, search queries, paper views and downloads (aggregated and anonymised).
• Technical data: IP address, browser type, and device information collected automatically via server logs and analytics services.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the ExamArchive service.
• Process and moderate uploaded exam papers and syllabi.
• Manage your account, role, XP, and streak.
• Send service-related emails (magic-link sign-in, upload approval notifications).
• Improve the platform through aggregated usage analytics.
• Prevent abuse, fraud, and violations of our Terms & Conditions.

4. Cookies and Local Storage

ExamArchive uses a secure HTTP-only session cookie to keep you signed in. We also use browser localStorage to remember your theme preference (light/dark). No third-party advertising cookies are used.

5. Third-Party Services

We use the following third-party services:

• Appwrite — backend-as-a-service for authentication, database, and file storage.
• Vercel — hosting and edge network; processes request logs.
• Vercel Analytics & Speed Insights — privacy-friendly, cookieless performance analytics.
• Google OAuth (optional) — if you choose to sign in with Google, your Google account email is shared with us.

Each third-party service operates under its own privacy policy.

6. Data Retention

Your account data is retained as long as your account remains active. Uploaded papers remain on the platform indefinitely unless removed by an admin or at your request. Activity logs are retained for up to 12 months for moderation purposes.

7. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate personal data via the Settings page.
• Request deletion of your account and associated data.
• Object to the processing of your data for analytics purposes.

To exercise these rights, contact us at privacy@examarchive.dev.

8. Security

We implement appropriate technical and organisational measures to protect your data. Session tokens are stored in secure, HTTP-only cookies. Passwords are never stored — authentication is handled via magic-link email or Google OAuth.

9. Children's Privacy

ExamArchive is intended for university students and is not directed at children under the age of 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page.

11. Contact

If you have any questions about this Privacy Policy, please contact us at privacy@examarchive.dev or visit our support page.