Privacy Policy

• Account details. Your first and last name, email address and password. The password is stored only as a one-way hash, never in readable form.
• Google sign-in. If you sign in with Google, we receive your name, email address, Google account ID and profile photo link. We don’t get your Google password.
• Student profile. What you choose to fill in: age, nationality, GPA, SAT score, English test and score, preferred field of study, preferred country and program level. We use it to match you with universities and scholarships.
• Your activity. Saved universities and scholarships, entries in the application tracker (including your notes and deadlines) and your deadline-reminder setting.
• Telegram. If you connect Telegram for reminders: your Telegram chat ID and username. Disconnecting in your profile, sending /stop to the bot or blocking it deletes them.
• AI advisor messages. The questions you ask the AI advisor and eligibility checker, together with the relevant parts of your profile, are sent to our AI provider to generate an answer. We don’t save the conversation in our database.
• Feedback. Bug reports and suggestions you send us. They are stored without your name or email.
• Technical data. Your IP address is used briefly to limit repeated sign-in, sign-up and verification attempts. Our hosting provider also keeps standard server logs.
• Usage analytics. With your consent (see section 3), Google Analytics records which pages are visited, approximate location (country/city), device and browser type.

• To create and secure your account and keep you signed in.
• To show universities and scholarships that fit your profile, and to power the AI advisor.
• To email you a verification code and, if you turn them on, application deadline reminders (also in Telegram, if you connect it).
• To prevent abuse, such as password guessing and spam.
• To understand which features are useful and fix what isn’t.

For visitors in the EU, UK and Switzerland, the legal bases are: performing our service for you (account, profile, tracker), our legitimate interest in keeping the site secure, and your consent for analytics.

Cookies we need for the site to work:

• token keeps you signed in, for 7 days.
• register_session holds a sign-up in progress while you verify your email, for 15 minutes.
• google_oauth_state protects Google sign-in against forgery, for 10 minutes.
• lang remembers the interface language you picked, for a year.

Analytics cookies: _ga and _ga_* from Google Analytics. Visitors from the EU, EEA, UK and Switzerland get them only after clicking “Accept”. Elsewhere they are on by default and you can turn them off. Declining removes them.

Your browser’s local storage also keeps your cookie choice, your comparison lists and your university list export. This data never leaves your device.

You can change your choice anytime: Cookie settings.

We use these companies to run the site. They process data only to provide their service to us. Some are located outside your country, including in the United States.

• Vercel. Hosting and server logs
• MongoDB. Database hosting for accounts, profiles and the tracker
• Upstash. Short-lived counters for rate limiting
• Groq. Runs the AI model behind the advisor and eligibility checker
• Resend. Sends verification and reminder emails
• Telegram. Delivers reminders to students who connect the bot
• Google. Google sign-in and Google Analytics

• Account, profile and tracker data: until you delete your account.
• Email verification codes: until they expire.
• Rate-limit counters: seconds to one day.
• Google Analytics data: up to 14 months, then deleted automatically.
• Feedback: as long as it’s useful for improving the site.

• See and edit your profile anytime on your profile page.
• Turn off reminders in your profile’s notification settings.
• Withdraw analytics consent with Cookie settings.
• Delete your account anytime with “Delete account” on your profile page. Your profile, saved items and tracker are removed immediately.
• Get a copy of your data by emailing sgoo0931@gmail.com from the address you signed up with. We reply within 30 days.

Depending on where you live, you may also have the right to object to or restrict processing, and to complain to your local data protection authority.

The site runs only over HTTPS. Passwords are hashed. The sign-in cookie can’t be read by page scripts and is sent only to this site. No system is perfectly secure, so please use a password you don’t use anywhere else.

ScholarizePath is meant for students preparing for university, typically 16 and older. If you believe a child under 13 has created an account, email us and we’ll delete it.

If we change this policy, we’ll update the date at the top of this page. For significant changes we’ll also let signed-in users know on the site.

Questions or requests: sgoo0931@gmail.com or Instagram @emirit_kg.