Accounts and sign-in
We use Supabase for email links and Google sign-in. We keep your Auth identifier, account email, eligibility declaration and application roles privately. Email confirmation establishes control of an inbox; it does not verify a degree, university affiliation or supervision experience. Google and Supabase process sign-in information under their own policies.
Session tokens are stored in your browser to keep you signed in. Unsent review drafts and your shortlist stay on this device. Signing out clears review drafts. We do not use advertising or analytics cookies.
Reviews and identity
Public pages show approved reviews and questionnaire answers only after the publication threshold is met. Review text can still identify a writer. Ordinary moderators can read submitted content and account references, but cannot retrieve account email. Owners can make exceptional identity lookups with a reason, an MFA session and an audit record. Infrastructure operators retain technical database access.
We do not promise absolute anonymity or confidentiality against a lawful obligation. Use support for a privacy request.
Deleting your account
You can request account deletion from Account. Last published reviews and ratings remain, while their account and authorship links are removed. Unpublished submissions and pending edits are removed. Withdraw a review first if you want it hidden. Re-registering the same email does not restore control of unlinked reviews or privileged roles.
Deletion can need an operator retry if the Auth provider is unavailable. The screen reports that state rather than claiming completion. Previously viewed pages, screenshots and external copies cannot be recalled.
Retention and support
Rate-limit buckets expire after their short abuse-control window and are periodically cleaned up. The proposed operator retention is 90 days for minimal administrative audit events and closed support requests, with identity links removed during account deletion. Operational backups expire after 14 days; a restore must replay deletion handling before traffic resumes. These are pilot operating rules, subject to owner review before real contributions.
Support collects the message you choose to send and a random reference. Keep that reference private: anyone who has it can see the response. Owners should keep replies free of personal data. Support is not an emergency service.