Privacy policy

Information we handle

• Account information: If student registration is enabled, we collect your @mail.aub.edu email address and password. Passwords are stored as password hashes, not as readable passwords. We also store account identifiers and email-verification status. Verification codes are sent by email and stored as protected hashes with expiry and attempt information.
• Reviews: We store course and professor identifiers, category ratings, whether a review concerns a recitation, your optional comment, the date, and your agreement to the review rules. Reviews are shown publicly without your account name or email. Details you put in a comment may identify you, so do not include personal information.
• Reactions: If you like a review while signed in, we store a record that prevents repeat likes and allows you to remove your like. Public review pages show the like count, not your account identity.
• Searches and technical information: Search terms are sent to our API to find catalog entries. GitHub Pages, which hosts the website, says it logs and stores visitor IP addresses for security. Your browser also connects to Google’s font servers to load the fonts used on the site; those requests disclose technical request information such as your IP address to Google.
• Browser session storage: The site stores your sign-in token, email address, and a review-submission reminder in your browser’s session storage. The sign-in token expires after two hours. These values are not browser cookies and can be cleared by signing out or closing the browser session.

How we use information

We use information to operate student accounts, verify eligible email addresses, authenticate review submissions and likes, display and moderate reviews, prevent duplicate reviews for the same course-professor pair, respond to support requests, and protect the site against misuse. We do not sell personal information or use it for advertising. The site does not currently use an analytics or advertising tracker.

What is public

Course and professor catalog entries, review ratings, recitation labels, comments, review dates, and like totals are available to visitors. Your account email, password hash, account identifier, and sign-in token are not included in public review responses. Do not put names, contact details, sensitive information, or other identifying details in a review comment.

Service providers and transfers

We use GitHub Pages to host the website and Microsoft Azure services to run the API and store application data. Gmail (Google) sends student verification messages and therefore receives the destination email address and message content needed to deliver them. Google Fonts supplies the website fonts directly to your browser. These providers may process technical or account information as needed to provide their services and may process it in countries outside the country where you live. Their handling is also subject to their own privacy terms.

• GitHub Pages data collection
• Google Privacy Policy
• Microsoft Privacy Statement

Retention and your choices

Account information is kept while an account is active and for as long as needed to protect the service or meet legal obligations. Public reviews remain available until deleted by the author, removed under the review rules, or no longer appropriate to retain. You can remove your own reviews from the “My reviews” page. For access to, correction of, or deletion of account information, contact [email protected]. Identity may need to be verified before responding. Some information may be retained where required for legal claims, security, or recordkeeping.

Ratesis is independently operated by Abdullah Ezzeddine, who handles privacy requests at [email protected].

Security

We use technical and organizational safeguards intended to protect information, including password hashing and authenticated API requests. No internet service can guarantee absolute security. Please use a unique password and contact us promptly if you believe your account has been accessed without permission.

Children and eligibility

Student accounts are limited to verified @mail.aub.edu email addresses. The site is not designed for children under 13, and we do not knowingly request account information from children under 13. Contact us if you believe a child has provided account information.

Changes and contact

We may update this policy as the site changes. The effective date above indicates when this version took effect. Questions or privacy requests can be sent to [email protected].