Check your thesis

Privacy policy — DRAFT preview

Updated: 18 October 2026. Legal review is pending. Operator: [legal name and business/postal address pending]. Privacy contact: [public privacy address pending]. This is a preview policy, not a completed launch notice.

Your thesis stays on your device

The thesis, guideline text, confirmed rules, findings and corrected copies are processed in your browser. They are not sent with checkout, payment recovery or help requests. If a separate support-file upload is enabled, it requires an explicit consent checkbox and uploads only the file you choose to a private store; you receive a deletion link and the file expires after 30 days.

Local checkout storage

When you continue to checkout, we temporarily save your thesis, confirmed guideline rules, report and selected fixes in this browser's IndexedDB so they can be restored on return. This copy is removed after restoration or when you start over. Drafts expire after 24 hours and expired entries are physically deleted on the next visit; nothing runs while the browser is closed. If storage is blocked, checkout will not start. Other tabs use separate draft identifiers. This is not a cloud backup.

The browser remembers the paid access token and private purchase identifier in local storage so a new tab can restore access. The server checks expiry and refund status. These identifiers grant access to the pass, not to thesis files. You can remove them using your browser's site-data controls. Clearing site data deletes local drafts and remembered access; it does not refund a purchase.

Data handled by the service

  • Purchases: order, checkout and entitlement identifiers, product, amount, currency, access expiry and refund/revocation status. Polar handles billing name, email and payment details. We do not receive card details. The payment webhook can include your email; it is used transiently for access emails and a keyed email lookup hash, not stored as a plain email address in our database.
  • Purchase recovery: the email you submit is used to look up a keyed hash and, if eligible, send a private single-use link. Links expire in 15 minutes; only token hashes are stored. Requests receive the same response whether an active purchase exists. A short keyed-hash cooldown limits repeated emails. Expired links are removed by recovery requests and retention cleanup.
  • Help and refunds: issue category, private request identifier, optional purchase identifier, status and date. The beta form has no manuscript text or attachment field. Support is not anonymous when a purchase identifier is linked to billing records held by Polar.
  • Optional service counts and feedback: when enabled, counts and supported public rule/pack identifiers are sent, not thesis text. Uploaded guideline rules and their source quotes are excluded. These integrations are disabled in the isolated payment preview.

Providers and retention

Cloudflare hosts the site, API and private storage; it processes technical data such as IP addresses for delivery, security, rate limiting and bot checks. Polar handles payments and billing records. Resend sends access and recovery emails when configured and receives the recipient address and message. Optional online reference lookup sends only bibliography entries to Crossref/OpenAlex after you choose it; it is disabled in the isolated beta payment preview.

Support requests, counts and feedback have a 24-month retention target. Consented support files have a 30-day expiry. Access lookup hashes are removed when no active entitlement needs them. Order records are kept for the applicable accounting/recordkeeping period, which must be set for the operator's jurisdiction before launch. Automatic database cleanup must be enabled and verified in production; monitor schedules remain disabled in this preview. We do not use advertising cookies or sell manuscript contents.

Requests and launch review

You can request access, correction or deletion using the final privacy contact, with a purchase or support identifier so we can locate the relevant record. You may also contact the relevant data protection authority. Before live launch, the operator must supply its identity, contact information, applicable legal bases, accounting retention period, processor/transfer disclosures and any region-specific rights required for its actual business. Any optional future account or cloud-file feature requires an updated notice.

Free beta and shared course guidelines

The free beta stores a random browser access capability locally and its hash, identifier, expiry and revocation status on the server. A private access link restores the pass, not documents. Membership does not verify a university affiliation. Aggregate daily beta stage counts are deduplicated per beta account and retained for 90 days; no thesis text or file names are included. The extension invitation uses local random-cohort and dismissal preferences, with no background content transfer.

Saving confirmed guidelines for yourself stores only rules and an optional course label in this browser. Sharing is a separate action: after permission and privacy confirmation, course/university/lecturer/term details, rule values and short source quotes enter a private moderation queue. Published reviewed versions are available to other students with their source dates and revision history; they do not imply university endorsement. We retain published revisions for provenance unless removal is required. Community reports and removal requests contain only issue categories and guideline/rule/version identifiers. They are reviewed manually; permission to publish must be established rather than inferred from student access.

An optional original guideline is uploaded only for private reviewer access, with an exact source hash and a 30-day expiry. No original is offered as a public download. Daily API cleanup and a storage expiration rule schedule deletion after 30 days. Pending proposals expire after 30 days; rejected/withdrawn unpublished content is purged after 30 days. You can withdraw a pending proposal and remove its attached original. People without a beta account can request a guideline privacy/removal review and receive a private status link. The operator's final contact details and legal review remain pending.

Course accounts and optional AI guideline reading

Course accounts store your chosen name, a keyed email lookup hash, university domain, email-verification date, role, course claims and review decisions. A university email alone does not grant staff approval rights. The email provider receives an address transiently to deliver a requested sign-in link; we do not store the plain address in the account database. Single-use links expire after 15 minutes; sessions expire after 30 days (90 days for the privately created owner session) and can be revoked. Retention cleanup removes expired challenges and sessions. We retain course decisions and audit identifiers for provenance, subject to valid correction/removal requests.

AI reading is optional and has its own consent checkbox. Only the guideline page, reduced image or selected text you choose is sent to Cloudflare Workers AI. Your thesis is never sent. The scan request and model output are not stored by our application; model-output storage is disabled in the provider request. AI suggestions may be wrong and require source review. Daily account request counts are retained for 90 days. A separately attached guideline original remains private and expires after 30 days under the sharing policy above. Provider/transfer disclosures and legal bases still need the operator’s final legal review.

Public course names, codes and programme details may be indexed from official university catalogues with their source, academic year and check date. A catalogue listing does not approve formatting rules or imply university endorsement. Guideline versions and staff permissions are managed separately.