Privacy
How we handle website analytics, policy queries and support messages.
Website analytics
we use first-party visitor and session identifiers, page paths, interaction categories, coarse country/device information and referral/campaign attribution to understand use and improve the service. Analytics are stored in Supabase. Use the control below to stop non-essential collection in this browser and remove its analytics identifiers; the preference remains. Analytics records are retained for a rolling 13 months.
MCP statistics
we retain only daily aggregates of university, topic, outcome and latency for 13 months. We do not retain raw prompts, assignment content, user identity or per-call event histories. ChatGPT and your installed client have their own privacy practices.
Infrastructure and security
Cloudflare and our OCI-hosted server process requests to deliver and protect the service. Infrastructure logs can contain network addresses and request metadata; this is separate from analytics. Nginx access logs rotate daily and retain 14 rotations. Other provider and system log retention follows the actual infrastructure configuration.
Support email
support@eduaipolicy.org uses Zoho Mail Free for an organization mailbox. No custom eDiscovery or archival retention policy is configured. Messages in the active mailbox are not automatically deleted after a fixed age. If a user account or the organization is deleted, Zoho provides a 30-day recovery period; related data are permanently deleted after that period. Ask for deletion or clarification by email. Do not send private coursework.
Microsoft Clarity
Microsoft Clarity: only on published university policy detail pages and after your explicit consent, Microsoft processes website interactions, device information and page URLs for heatmaps and masked session replays to improve usability. Search, internal pages and pages with query parameters are excluded. Advertising storage is denied; we do not send custom user identifiers. Ordinary playback is retained for 30 days; heatmaps, click data and labeled or favorited sessions for 9 months. You can withdraw consent below; disabling website analytics also disables Clarity. Microsoft applies its own privacy practices.
Microsoft Privacy Statement · Microsoft Clarity — data retention