Privacy Policy

Who we are

Courseflock is an independent project built and run by Gabriel Ehuwa, a LAUTECH student. It is not affiliated with or endorsed by LAUTECH. Contact: support@courseflock.com.

What we collect

• Account details: your full name, your @student.lautech.edu.ng email, faculty, department, level, an optional matric number, and your password (stored only as a one-way hash).
• What you do on Courseflock: course enrolments, questions, replies, answers, votes, past question requests, study group requests and memberships, moderator applications, and notifications.
• Saved GPA results: visible only to you.
• Files: past questions and course materials uploaded by admins and approved course moderators.
• Technical data: failed login records, rate-limiting counters, short-lived verification and password reset codes (stored as hashes), and server logs that can include your email address or user ID. We do not store IP addresses or device details in our database. Our hosting provider may process IP addresses in order to deliver the site.
• Visit statistics: we use Vercel Web Analytics to count page views and visits. It does not use cookies. Visitors are identified only by a hash created from the request, and we see aggregated figures such as which pages are visited, the referring site and the type of device.
• Past question views: we record which course's past question page you opened and when, to see which courses need papers. Administrators see totals, not individual views.

Who can see your information

• Students who can open a course page can see that course's member list, which shows each member's name, level, role badge and matric number. This includes students who have not enrolled in the course. Which students can open a course depends on the course: some are open to a department, some to a whole faculty, and some to everyone. Your name, level and role badge also appear next to your questions, replies and answers.
• Members of a study group you join can see each other's names and matric numbers (or email addresses where a matric number has not been added).
• Moderators and admins can see these details as well.
• Your votes and your saved GPA results are not shown to other students, moderators or admins in the app.
• Past questions you open carry a watermark showing your name, email and matric number, to discourage sharing.

Why we use it

To run your account, show you your courses, keep the community safe and secure, and send you verification codes, password reset codes and notifications about your account and activity. We may occasionally email you about Courseflock updates. We do not sell your data or show ads, and we do not use advertising or cross-site tracking scripts.

Who processes it

Vercel (hosting, file storage and visit statistics), Neon (database) and Resend (email) process data on our behalf. Their servers are outside Nigeria, including in the United States, so your data is transferred out of the country. We choose providers with established security practices. Separately, when you open a PDF, your browser may fetch font-encoding files from unpkg.com, a public file-delivery service, which can see your IP address.

Cookies and browser storage

We use only essential cookies: a sign-in session cookie (up to 7 days), a security (CSRF) cookie, and a redirect cookie. We use no analytics or advertising cookies. If you save a GPA calculation before signing in, the form content is held temporarily in your browser tab and cleared once it is restored.

How long we keep data

Account data stays while your account exists. Verification codes expire after 15 minutes and password reset codes after 10 minutes. Failed login records last 15 minutes and are cleared after a successful login. If you delete your account (Settings, then Delete account), your personal data is deleted, including your saved GPA results, notifications, enrolments and votes. Your questions, replies and uploads remain, attributed to "Deleted User", so that conversations stay readable. Copies may remain in our providers' backups for a limited time after deletion.

Your rights

You can ask to see, correct or delete your data, or object to how we use it. You can change your email, matric number and password in Settings, or delete your account there. For anything else, including changing your name, faculty, department or level, or if you cannot log in, email support@courseflock.com. We will confirm it is you through your student email and respond within 30 days. You can also complain to the Nigeria Data Protection Commission.

Children

Courseflock is intended for university students. We do not collect dates of birth and do not knowingly collect data from children. If you believe a child's data is on Courseflock, contact us and we will remove it.

Security

We use hashed passwords, encrypted connections, access controls and rate limiting. No system is perfectly secure. If a data breach affects you, we will tell you and the authorities as the law requires.

Changes

We will update the date above when this policy changes.