Privacy Policy

1. Our Commitment to Your Privacy

GradeMyProfessor Bahrain ("we," "our," "the Platform") is committed to protecting your privacy and ensuring your anonymity. This policy explains what information we collect, how we use it, and how we protect it.

2. Information We Collect

Account Information: When you create an account, we collect your username, email address, and a hashed version of your password. Your password is encrypted and cannot be read by anyone, including our team.

Review Content: The ratings, tags, grades, and comments you submit. This content is published anonymously — your identity is never attached to your reviews.

Device Information: We use FingerprintJS (an open-source browser fingerprinting library) to generate an anonymous device fingerprint. The raw fingerprint is immediately SHA-256 hashed with a local salt and the hash is stored in your browser's local storage under the key gmp_anon_id. The raw fingerprint is never stored or transmitted. This hash cannot be used to identify you personally and is used solely to prevent duplicate reviews.

Technical Data: IP address (hashed and anonymized), browser type, and timestamps for security and rate-limiting purposes only.

3. How We Use Your Information

We use your information to: verify you are a real student (not a bot); prevent abuse, spam, and duplicate reviews; notify you about the status of your reviews (via email); improve the Platform; and comply with legal obligations if required.

4. Anonymity Guarantee

Your reviews are 100% anonymous. Specifically: your username is never shown with your reviews; your email address is never shared with professors, universities, other users, or any third party; your IP address is hashed immediately and the original is never stored; there is no way for anyone — including our administrators — to connect a published review to your account by viewing the public site.

We take this guarantee seriously. Anonymity is fundamental to the Platform's purpose of enabling honest student feedback.

5. Information We Never Collect

We do not collect: your real name (unless you choose to use it as a username); your phone number; your university student ID; your location data; or any biometric data.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties. We may disclose information only if required by law or to protect the safety of our users.

We use the following third-party service providers who may process limited technical data on our behalf: Sentry (error monitoring), Upstash (rate limiting infrastructure), and FingerprintJS (anonymous device fingerprinting for duplicate review prevention). These providers are contractually bound to protect your data.

7. Data Security

We protect your data using: encrypted password storage (bcrypt hashing); HTTPS encryption for all data in transit; row-level security policies on our database; rate limiting to prevent abuse; and regular security reviews.

8. Data Retention

Account information is retained as long as your account is active. If you request account deletion, we will remove your personal information within 30 days. Published reviews will remain on the Platform in anonymous form.

9. Your Rights

You have the right to: access the personal information we hold about you; request correction of inaccurate information; request deletion of your account and personal data; withdraw consent for data processing at any time.

To exercise these rights, contact us at the email below.

10. Cookies

We use minimal local storage for: remembering your theme preference (light/dark); remembering your language preference; maintaining your login session. We do not use tracking cookies or any third-party analytics.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email.

12. Contact

For privacy-related inquiries, contact us at privacy@grademyprofessor.bh