Privacy policy.

You can browse every course without an account. If you sign up, we keep what you need to use the site: your email, your profile, the courses you save, your reviews and your friends. Reviews are shown without your name. We don't sell your information, show ads, or use advertising trackers. You can delete your account and its data at any time from Settings.

Courseflix is an independent student project for University of Toronto Mississauga students. It is not affiliated with the University of Toronto. Questions about this policy or your information can be sent to Abood.awaida@mail.utoronto.ca.

Account. Your email address and password (stored only as a secure hash by our authentication provider). If you sign in with Google, we receive your email address and basic account details from Google.

Profile. Your display name, username, avatar, program, year of study, and whether your shortlist is private. All of these are optional except a display name, which defaults to “UTM student”.

Activity. The courses you save to your shortlist, the ratings and comments you submit, friend requests and friendships, notifications, and the achievements you unlock.

Password resets. To stop abuse, we keep a one-way hash of the email address and IP address for each reset request. These are not readable as your email or IP and are deleted after about a day.

Usage statistics. We use Vercel Web Analytics and Speed Insights to count page views and measure loading speed. They do not use cookies and do not identify you across other websites.

Your profile (display name, username, avatar, program and year) can be seen by anyone, including people who aren't signed in, and can be found through friend search.

Your shortlist can be seen by other signed-in students unless you make it private in Settings; a private shortlist is visible only to your friends. Friends are notified when you save a course.

Your reviews are public but are shown without your name, username or profile. Anything you write in a comment, including a professor's name, is public, so don't include details that identify you or anyone else.

Your achievements are visible to you and your friends.

Courseflix uses your browser's local storage, not cookies, to keep you signed in and to remember preferences such as your selected program, theme, sound setting, which subjects you browse most (used to suggest a program), dismissed prompts, and the link or campaign that first brought you to the site. This information stays in your browser and is not sent to us. Clearing your site data removes it.

Only to run Courseflix: to sign you in, show your shortlist and profile, calculate course ratings from student reviews, power friends and notifications, send password-reset emails, prevent abuse, and understand which pages are used so we can improve the site. We don't sell personal information or use it for advertising.

We rely on a small number of providers to run the site:

• Supabase: database and sign-in.
• Vercel: website hosting, analytics and performance measurement.
• Resend: sending password-reset emails.
• Google: optional “Sign in with Google”.
• Google Fonts: the site's fonts are loaded from Google, which receives your IP address when they load.

These providers may store or process information outside Canada, including in the United States, where it may be subject to local laws.

We keep your account information until you delete your account. You can delete it at any time from Settings; this permanently removes your account, profile, shortlist, reviews, friendships, notifications and achievements. Copies may remain in our providers' backups for a limited time before they are overwritten.

You can also edit your profile, delete individual reviews, remove saved courses, and make your shortlist private at any time.

Under Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask to access the personal information we hold about you, ask us to correct it, or withdraw consent by deleting your account. Email Abood.awaida@mail.utoronto.ca and we'll respond within 30 days. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Data is sent over encrypted connections, and database rules limit each account to its own private information. No service is perfectly secure; if we learn of a breach that affects you, we will notify you as required by law.

If we change this policy, we'll post the new version here with a new “Last updated” date. See also our Terms of Use.