Privacy Policy

Who runs this site

OpenOlympiad is operated as an individual, non-commercial project by its creator. There is no parent company, no investor, and no advertiser. For privacy questions, write to hello@openolympiad.org.

What we collect

• Email address — to create your account and send the rare transactional email (e.g. password reset).
• Name and profile picture — only if you sign in with Google. Used to personalise the dashboard. We never post anything to your Google account.
• School affiliation — derived from your email domain when a teacher signs up, so other teachers from the same school can auto-join.
• Practice activity — which questions you attempted, your answers, time taken, and which group assignments you completed. This is what makes the “progress” view useful.
• Teacher contributions — when a teacher submits a question, we store it linked to their user id so we can credit them with a contributor badge.
• Basic server logs — IP address and user-agent are present in our hosting provider's logs for a short retention window, used only for debugging and abuse handling.

What we do not do

• We don't run ads, and we don't embed ad-network trackers.
• We don't sell, rent, or trade your data.
• We don't use your data to train ML models. (We do use AI tools internally to help author questions — that's a separate workflow that doesn't touch student data.)
• We don't profile children for marketing of any kind.

Children and parental consent

The platform is designed for students around Class 6 (typically 11–12 years old). If your child is below the age of digital consent in your jurisdiction, a parent or teacher should set up the account on their behalf. Teachers using OpenOlympiad with a class are expected to have school or parent consent under their school's usual policies.

Parents can email hello@openolympiad.org at any time to review or delete their child's data — see “Your rights” below.

Cookies

We use only essential cookies — a signed session token after you log in, and a short-lived state cookie during the Google sign-in flow to prevent CSRF. No analytics cookies, no advertising cookies, no third-party trackers.

Service providers

The site runs on infrastructure provided by:

• Amazon Web Services — hosting and database (region: us-east-1).
• Google — only if you choose “Sign in with Google”; we receive your sub-id, email, and optionally name + picture from your Google account.
• Stripe — used only when donations are enabled, to process the donation. We never see your card details.

These providers process the data they need to provide their service and nothing more.

Your rights

You can ask us to:

• Show you all data we hold about your account.
• Correct anything that's wrong.
• Delete your account and associated practice data.
• Export your progress as JSON.

Email hello@openolympiad.org from the address on the account, or have a parent / teacher email on behalf of a child. We'll respond within a reasonable time, usually within a week.

Changes to this policy

We'll update the “last updated” date above when this policy changes. Material changes will be flagged on the homepage so regular users notice them.