1. Information We Collect

When you register, we collect your first name, last name, email address (Gmail or a school email), and a securely hashed version of your password. When you use Rooms and Tasks, we store the content submitted through the Platform, including task instructions and images uploaded by Hosts, code submitted by Participants, and your submission activity. When a Host adds Participants to a Room, we also process the email addresses provided, whether entered individually, pasted in bulk, or imported via a CSV file.

2. IP Addresses

An IP address can be personal information under the Data Privacy Act of 2012 (Republic Act No. 10173). Following the Act's principle of proportionality, the Platform does not store IP addresses in its activity logs or anywhere in your account records. Activity logs record only the account, the action, and the time.

Your IP address is used only briefly and automatically: to limit repeated login, registration, and password reset attempts for a few minutes, and as part of your active login session, which ends when you log out or the session expires. It is never displayed, exported, or used to build a profile of you.

3. How We Use Your Information

• To operate your account, including login, email verification, and password reset
• To provide the Rooms, Tasks, and Exercises features
• To maintain platform integrity, including detecting abuse patterns and enforcing bans
• To generate aggregate, non-identifying platform statistics (e.g., total users, submissions per day)

4. Advertising and Cookies

The Platform may display advertisements through third-party advertising networks to help offset hosting and domain costs. These networks may use cookies to serve advertisements, which may be based on your prior visits to this and other websites. You may view, manage, or opt out of personalized advertising through the applicable network's own settings, such as Google's Ads Settings at adssettings.google.com, or through general industry opt-out tools such as the Network Advertising Initiative at optout.networkadvertising.org.

The Platform does not control the specific content of third-party advertisements. Ad categories considered unsuitable for an academic, student-facing environment, including gambling, dating, and sensitive content, are restricted through each advertising network's own content controls, where available.

5. Data Retention

Audit Log entries are retained for a maximum of 1 year (365 days) and are automatically and permanently purged after that window. When an Administrator clears Audit Log entries, they are permanently deleted after a 3-day waiting period, during which the clear can be cancelled. Account data is retained until your account is deleted as described below.

Account deletion. When you delete your account, it is scheduled for deletion and you are logged out. You have 30 days (3 days for Administrator accounts, and for deletions started by an Administrator) to change your mind by logging in and choosing Keep My Account. After that waiting period:

• Erased: your name, email address, password, pending join requests, pre-approved Room entries, moderation flags, and login sessions.
• Kept without your identity: code you submitted and the grades and feedback you received in Rooms hosted by other people. These remain part of the Host's class records and appear under the name "Deleted User", so they can no longer be linked to you.
• Kept until the 1-year purge: Audit Log entries that record your account's past actions, for accountability.

A Host must delete every Room they host before they can delete their account, because those Rooms hold other users' work. After deletion you may register again with the same email address as a new account.

6. Who Can Access Your Data

Administrator accounts have full visibility into the Audit Log and account management tools. Administrator access itself is limited to a maximum of three accounts at any time, added only with recipient confirmation, and every addition or removal is itself logged for accountability.

7. Data Sharing

We do not sell your personal information to third parties. Beyond the advertising cookies described in Section 4, data is stored on our hosting provider's infrastructure solely to operate the Platform.

8. Your Choices

You may delete your account at any time from your profile settings. Deletion follows the waiting period and steps in Section 5: your personal account data is erased, and work you submitted in other people's Rooms is kept only under the name "Deleted User".

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Platform after changes are posted constitutes acceptance of the revised Policy.

10. Contact

Questions about this Privacy Policy can be directed to webcorefe@gmail.com.