Privacy policy

Information we collect

When you create an account, Supabase processes your email address and authentication information. Your profile may include a display name, username, biography and visibility choice. We store quiz attempts, Daily Challenge results, XP, streaks, titles and certificates associated with signed-in accounts.

If you contact us, we store the name, email address, subject and message you submit. Administrative activity logs record successful administrator actions for accountability.

Public information

Profiles are private unless you choose to make them public. A public profile may show your display name, username, biography, selected learning statistics, titles and recent public activity. Email addresses are never displayed publicly. Private or incomplete profiles are excluded from public leaderboards.

Practice-test attempts, answers, scores and test history are private account records. They appear only in the signed-in user's “My practice tests” area and are never included in public profiles, leaderboards or activity feeds.

Browser storage and analytics

Essential browser storage supports authentication, theme preferences, privacy choices and guest challenge progress. Optional Vercel Analytics and Speed Insights are loaded only when you choose “Allow analytics.” They help us understand page use and performance. You can change this choice at any time through “Privacy choices” in the footer.

Service providers

We use Supabase for authentication and account-related database services, Vercel for hosting, analytics and file delivery, and connected storage services for published content. These providers process information under their own security and privacy terms.

Retention and security

We retain account and learning records while your account is active or while needed to operate and protect the service. Contact messages and administrative logs are retained for operational follow-up. We use access controls, server-side authorization, secure cookies and database policies, but no internet service can guarantee absolute security.

Private opportunity matching profiles and notification preferences are deleted when the associated account is deleted. Delivery records may retain an anonymized recipient hash, delivery status and provider identifier for up to 12 months to prevent duplicate messages, investigate abuse and measure reliability. Community submissions and reports are normally retained for up to 24 months unless continued review, abuse prevention or legal obligations require longer retention.

Your choices

You may keep your profile private, decline optional analytics, or ask us to correct or delete personal information. Some records may be retained where needed to prevent abuse, preserve certificate integrity or meet legal obligations.

You may delete only your opportunity matching profile without deleting saved opportunities, or permanently delete your account from the account page. Account deletion removes the authentication user and account-linked records through database deletion rules. Limited anonymized security logs and records needed to preserve issued-certificate integrity may remain.

Contact

For privacy questions or requests, email karimovislombek783@gmail.com or use the contact form. Central Asia Trade Research is an independent student-led project based in Uzbekistan.

Opportunity submissions, matching and emails

When you suggest an opportunity or report incorrect information, we store the information you provide, your email when requested, and a one-way network-address hash used for abuse prevention. These records are private, used only for review and security, and are not sold or published automatically.

Signed-in users may privately save opportunities and follow recurring programs. Saved and followed items are tied to the account, are not displayed publicly, and are deleted if the account is deleted.

The optional matching profile stores only an academic level, a two-letter country code, selected research fields and funding preferences. It does not request a birth date, passport information, gender or ethnicity. Matching is rule-based, provides explanations, and is guidance rather than an eligibility decision. The profile is private and can be deleted independently.

Deadline reminders are enabled when a signed-in user saves an opportunity. Weekly digests and reopening alerts remain optional. Every email includes an unsubscribe link, and all email types can be disabled from the account page. We store preferences, delivery status and a one-way recipient hash for abuse prevention and deduplication; delivery logs do not store the message body.