Privacy Policy

1. What We Collect

Just visiting. The free tools (searching a major, your score and roast, sharing, comparing, the leaderboard) need no account and ask for no name or email. The only optional exceptions are the free extended-roast signup and the campus ambassador program, described below. We receive anonymised usage data automatically, through analytics tools (see Sections 4 and 5): browser type and version, device type, pages visited and features used, referring website, approximate location (country or city level) and date and time of visit.

What you type into the search box. When you pick a result, or when nothing matches, the words you typed (cut to 60 characters) are recorded in our analytics so we can see which majors people look for. Please do not type personal details into the search box.

“Where did you hear about us?” After a result we may ask where you found the site. You pick one answer from a fixed list; nothing you type is collected. The answer is recorded in our analytics, and we receive it as a private Telegram alert with the major you scanned and your country, device type and browser.

The extended roast and 3 emails (optional). Under your result you can type your email address and tick a box to get an extended roast and your major's numbers on the page and by email. If you do, we store your email address, the major you scanned and its score, the date and time you agreed, the country your visit came from, and the ref tag of the link you arrived by (if it had one). We then send you three emails (the roast and numbers on day 0, one more fact on day 1, and a note about the paid plan on day 2), each with an unsubscribe link. If you also tick the separate score-alert box, we store that choice and the last score we told you about, and send you one email whenever your major's score on the Site changes. We never send your email address to analytics. It is included in our private Telegram alert about your signup (with the major you scanned), so we can follow up with you ourselves. We only email you if you tick the box, and you can unsubscribe at any time; after that we keep your address only so we do not email you again, unless you ask us to delete it.

Asking for a major we don't have. If your search finds nothing, you can ask us to add that major. We store what you typed, the country your visit came from and, only if you type it, your email address, so we can send you one email when the major is added. Our private alert says which major was asked for, never your email. Ask us any time to delete it.

Campus ambassadors. If you sign up as an ambassador on the ambassadors page, we store your name, email address and campus, the date you agreed to the program rules, how many visits your link brought, and, for each payment started through your link, its payment reference, amount, currency and your commission. We use your email only to arrange your payouts and about the program. We never store payment or mobile money details. Our private alert says only your name, campus and link code. If you arrive by an ambassador's link, we keep that link's code in a cookie (cm_ref) for 30 days so a purchase you make is credited to them; the ambassador sees only totals (visits, sales, earnings), never who you are or your email.

Ratings and reviews. If you tap thumbs up or down on “Was your score accurate?”, we store that vote with the major you scanned, and we receive a private Telegram alert with the vote, the major and your country, device type and browser. If you leave a star rating in the rating pop-up, we store the rating, any words you typed (up to 300 characters) and the major you scanned. If you bought a plan and review it, we store your stars, any words you typed, and the payment reference of your purchase, so we can mark the review “Verified purchase” and allow one review per purchase. We do not store your name, email address or IP address with a rating or review. We show your first name or initial, your major and your country next to a review only if you tick the box that allows it. The country is the one our hosting provider detected for your visit, never one you typed. A review is not shown publicly until we have read and approved it. Reviews are free text, so please do not include personal details such as your name, email address or phone number. We also receive a private message through Telegram when a rating or review arrives (for the star pop-up it includes your country, device type and browser).

Scan alerts and the contact form. We receive a short private alert through Telegram when someone scans a major, containing the major, country, device type, browser and referring website. If you write to us through the contact page, we receive your message and the name and email address you type, as a private message through Telegram, with your country, device type and browser. We use them only to read and reply to you, and we do not publish them. These alerts and messages never include your IP address.

Buying The Survival Plan. Payment is handled by our payment providers on their own pages: Paystack (for visitors in Ghana, in cedis, by card or mobile money) and Stripe (for visitors elsewhere, in US dollars, by card or the wallets Stripe offers). Your payment details are entered there and go straight to the provider: we never see or store them. To start a payment we send the provider the email address you type (used for your receipt) and the major you are buying for. After a successful payment we keep a purchase record containing: the payment reference, the major, the plan type, the amount and currency, the provider's transaction number, the date, whether it was refunded, and a one-way cryptographic fingerprint of your email address. We use the fingerprint only so you can restore your plan by entering the email you paid with. We do not store your email address itself in our database, and we do not send it to analytics or to our alerts. The same applies to the small one-time payment to reveal a single result during a short paid-result experiment: it is recorded the same way (marked as a result unlock for that major). Paystack and Stripe each keep their own record of a payment under their own policies.

Our private alerts about payments. When someone clicks the unlock button, starts a payment, completes or abandons one, or is refunded, we receive a private Telegram message with the major, the plan, the amount, the payment reference, and your country, device type and browser. It never contains your email address, name or IP address.

IP addresses. We use your IP address only briefly, in memory, to limit abuse (for example to stop automated guessing), and we do not store it or send it anywhere. Our hosting provider and Google process IP addresses as part of running their services.

2. Cookies and Similar Storage

The Site uses cookies (small text files placed on your device) and similar browser storage. They fall into these groups:

• Essential: your light or dark theme and your sound on/off choice; and, only if you buy a plan or restore one, a signed unlock cookie (cm_entitlement) that tells the Site this browser has paid for that major. It is HttpOnly and lasts one year, so your plan is still there when you come back. You can delete it at any time; you can then restore your plan with your payment reference or the email you paid with. During a short paid-result experiment, paying to reveal a result sets a second signed cookie (cm_unlock) in the same way, which also lasts one year.
• Ambassador link: only if you arrive by a campus ambassador's link, an HttpOnly cookie (cm_ref) holding that link's code for 30 days, so a purchase is credited to them. It does not identify you.
• Small reminders: whether you already left a rating or chose “maybe later”, whether you already answered “Was your score accurate?” for a major, whether you already reviewed a plan, whether you already answered the “where did you hear about us” question, and, for the current tab only, which plans you opened. They stay in your own browser.
• Analytics: set by Google Analytics to help us understand how visitors use the Site (see Section 4).
• Advertising: set by Google AdSense to serve ads, which may track your browsing activity across sites that use Google advertising (see Section 5).

You can control cookies through your browser settings; blocking some of them may stop parts of the Site working (for example, a blocked unlock cookie means you would have to restore your plan). For more on managing cookies, see aboutcookies.org.

3. How We Use Information

• To run the Site and deliver the plan you paid for, including letting you restore it and download your PDF
• To process payments, send you a receipt (through Paystack or Stripe), and handle refunds and support requests
• To understand how the Site is used, fix problems and improve it
• To show advertising through Google AdSense
• To keep the Site secure and prevent abuse and fraud

We do not sell, trade or rent your personal data.

4. Google Analytics

We use Google Analytics to analyse Site usage and improve the experience. Google Analytics collects anonymised data about how visitors interact with the Site, which is processed by Google and is subject to Google's Privacy Policy. We send it events such as which major was scanned, whether a result was shared, and the steps of the buying process (for example “unlock clicked” and “payment completed”). We never send it your email address or name. You can opt out with the Google Analytics Opt-out Browser Add-on.

5. Google AdSense & Advertising

We use Google AdSense, a service provided by Google LLC, to display advertisements. Google may use cookies and similar technologies to serve ads based on your prior visits to the Site and other websites, which enables it and its partners to show you relevant ads. You may opt out of personalised advertising in Google Ads Settings or through the Network Advertising Initiative opt-out page. More on how Google uses data from sites that use its services: policies.google.com/technologies/partner-sites.

6. Who We Share Information With

We use these service providers to run the Site. Each handles only what it needs to do its job:

• Paystack: processes payments and refunds for visitors in Ghana and sends your receipt. It receives your email, the amount and the major, and the payment details you enter on its page.
• Stripe: processes payments and refunds for visitors outside Ghana and sends your receipt. It receives your email, the amount and the major, and the payment details you enter on its page.
• Resend: sends the three emails if you signed up for them. It receives your email address and the message.
• Supabase: stores our purchase records, the ratings and reviews, the email signups and the ambassador records described in Section 1, in a database hosted in the European Union (Ireland).
• Vercel: hosts the Site and measures its speed and performance.
• Google: Analytics and AdSense (Sections 4 and 5).
• Telegram: delivers the private alerts (including the email address of an extended-roast signup), rating notifications and contact messages to us.

We may also disclose information if the law requires it, or to protect the Site and its users from fraud or abuse. We do not sell your personal data.

7. How Long We Keep It

• Analytics: Google Analytics event data is kept for 14 months.
• Purchase records: kept for as long as needed to provide your plan, support you, handle refunds and meet financial record-keeping duties.
• Ambassador records: kept while you are an ambassador and as long as needed to settle what you earned, or until you ask us to delete them.
• Email signups: kept until you unsubscribe and then only as a do-not-email record, or until you ask us to delete them.
• Ratings and reviews: kept in our database until we delete them. A review shown on the Site stays there until we remove it or you ask us to.
• Contact messages and alerts: kept in our private Telegram chat until we delete them.
• Unlock cookie: one year, or until you delete it.

8. Your Choices and Rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by writing to us through the contact page. For a purchase, include your payment reference (it starts with “cm-” and is on your receipt). If we delete a purchase record you will no longer be able to restore that plan, and the payment provider's records and financial records we are required by law to keep will remain. You can also ask us to remove a review you left: include your payment reference (for a verified review) or the major and the words you wrote, because we do not store your name, email address or IP address and need something to find it by. You can also clear your cookies and browser storage at any time, opt out of analytics and personalised ads as described above, or use the Site's free tools without giving us any personal information.

9. Security

We take reasonable steps to protect information: the Site is served over HTTPS, payments happen on the payment provider's secured page, the unlock cookie is signed and cannot be edited, the purchase and review databases can only be reached by our server, and we keep your email address out of them. No system is perfectly secure, so we cannot guarantee absolute security.

10. International Transfers

Our providers operate in several countries, including the United States and the European Union, so information about your visit may be processed outside the country where you live. We choose established providers and, where the law requires, rely on their standard safeguards.

11. Third-Party Links

The Site may link to other websites (for example Twitter/X and WhatsApp when you share a result). We are not responsible for their privacy practices, so please read their policies.

12. Children's Privacy

The Site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal data, please contact us so we can remove it.

13. Changes to This Policy

We may update this policy from time to time. Changes are posted on this page with a new “last updated” date. Using the Site after a change means you accept the updated policy.

14. Contact Us

For questions about this policy or your information, reach us here: