Pujuan
1. Scope and operator
This policy covers Pujuan accounts, mock exams and information services. Operator identity, contact details and service region remain to be completed. The final policy must reflect actual operations.
2. Information processed
Account data includes username, email, verification state, password hash and account timestamps. Passwords use bcrypt hashes rather than plaintext in the user table.
Exam data includes papers, submitted answers, progress, timing and results. Security and diagnostic logs may include request time, IP address, browser information, routes and operation results.
Current forms do not request identity documents, contacts, precise location or payment card information.
3. Purposes
Information supports accounts, login, verification, password recovery, exam progress, marking, history, troubleshooting and abuse prevention. Unrelated purposes require an appropriate explanation and any applicable consent.
4. Cookies and browser storage
Local storage retains login tokens, account display information, optionally remembered usernames and some exam answers. A cookie may store language preferences. Browser and PWA caches store resources and some responses.
Log out on shared devices and clear site data when appropriate. Clearing local data may remove unsynced work. A local copy is not proof of a successful server submission.
5. Providers and external sites
Verification and recovery emails send recipient addresses and messages through the configured mail provider. Hosting, database, cache and email providers and their locations are [to be confirmed].
The service is not provided for the purpose of selling personal information. Any processing by providers, disclosure or transfer must follow applicable requirements. External websites have their own policies.
6. Retention and security
Account, exam, log and backup retention periods and server locations are [to be confirmed] by the actual operator.
Password reset links last up to 30 minutes and are single-use. Verification links last up to 24 hours. Password hashing, access controls and rate limits are used, but no system can guarantee absolute security.
7. Choices and requests
You can view exam history and account details and change your password. For access, correction, copies, deletion or account closure requests, the operator must complete an effective contact channel and procedures. Necessary identity checks may apply.
There is currently no automated account deletion, data export or email change feature. Logging out or clearing local data does not delete server records.
8. Minors
Minors should use the service with guardian guidance. Whether children may register, and any guardian notice, consent and request procedures, remain [to be confirmed] for the target audience and region.
9. Changes and contact
The page shows a template revision date, not a finalized effective date. Material changes should be communicated appropriately. Contact placeholders must be replaced before launch.