Privacy policy
What we collect
Account data: name, email address, password hash, language, adult confirmation and the policy version you accepted.
Profile data you enter: headline, summary, specialties, skills, projects, education, experience, certifications, links, images and work preferences.
Private verification data: your Cyberpedia affiliation claim and evidence, and any certificate evidence. These are never shown publicly.
Operational data: security and review audit events, email delivery metadata, and rate-limit counters.
What becomes public
Only the approved revision of a profile, and only while you have given publication consent, your profile is not hidden, your account is active and your affiliation is verified.
Location, time zone and credential identifiers appear only if you choose to show them. Your email address is never shown.
Hiding your profile or withdrawing consent removes it from the directory, search, profile pages, project pages and images. Copies that others already downloaded or cached cannot be recalled.
Review
Reviewers see the exact submitted revision and your private affiliation evidence. They may leave feedback visible to you and internal notes visible only to staff. Reviewers cannot rewrite your claims.
Inquiries, contact and reports
Someone who contacts a student provides their name, email address and message. They must confirm their email before anything is delivered. Their address is shown only to the student, and the student’s email address is shared with them only if the student accepts. Reports and support messages are visible to administrators.
Unconfirmed inquiries expire after 30 minutes. Expired, cancelled and declined inquiries are removed after 30 days; all inquiry records are removed within 180 days or when the student’s account is purged.
We send account emails (verification, recovery, security) and, unless you turn them off, short status notices about your review. Email never contains private evidence or internal notes.
Cookies and verification
We use a session cookie to keep you signed in, a cookie that remembers your language, and Cloudflare Turnstile on forms to reduce abuse. We do not use advertising cookies.
Retention
Review submissions and decisions are kept with your account until it is purged. Dashboard notifications and audit events are removed after 180 days. Email bodies are cleared once delivery finishes and delivery metadata is removed after 30 days.
When you delete your account it becomes inaccessible immediately and is purged after a 30-day hold. Backups expire on their own schedule.
Your choices
You can edit, hide or withdraw consent for your profile at any time, change notification preferences, and request account deletion from your privacy settings.