Privacy Policy
Last updated: October 2026
Your privacy is fundamental to our mission. This policy explains what data we collect and how we protect it.
What We Collect
We collect the minimum data necessary to operate: a random visitor ID stored in an HttpOnly cookie, WebAuthn passkey public keys (no passwords, no emails, no names), course completion records, quiz attempt scores, and anonymous ballot choices. Ballot data is cryptographically separated from voter identity — even we cannot link a vote to a voter.
The alignment assessment: your answers never leave your browser
The alignment assessment needs no account, and your answers are held only in your own browser's session storage. They are not sent to our servers, to any analytics service, or to any error report, and they are not attached to anyone's membership profile. A result is saved only if you sign in and explicitly choose to save it; having an account does not save anything by itself, and a saved result can be deleted at any time. Closing the browser discards anything unsaved.
How Data is Stored
All data is stored in encrypted PostgreSQL databases on secured servers. Passkey credentials use the WebAuthn standard. Communication between your browser and our servers is encrypted via TLS/HTTPS.
Data Sharing
We do not sell, share, or transfer your data to any third party. We do not use analytics services, advertising networks, or tracking pixels. There are no third-party cookies on this platform.
Data Deletion
Since accounts are anonymous, clearing your browser cookies effectively disconnects you from your account. If you wish to have your data permanently removed from our servers, contact us through our secure channels.
Your Rights
You have the right to access, correct, and delete your data. Given the anonymous nature of our system, most of these rights are exercised automatically — we simply don't have personal data to misuse.
The contact and collaboration form
What you enter in the contact and collaboration form is used only to reply to you and to follow up internally, and is not given to any individual, organisation or third party under any circumstances. Access is limited to a small number of people who are directly responsible for protecting it. Given the security conditions, particularly for users inside Iran, we aim to collect the minimum data necessary and to hold it with the greatest care. If you would rather not give an email address, use the secure contact routes listed on the contact page.