Privacy Policy

What we collect

Information you give us

• Account details — your name, email address, and a password (stored only as a salted hash), or a linked sign-in provider instead of a password.
• Your planning data — the prerequisite courses you log (course names, grades, terms), the programs you track and compare, your deadline reminders, and your notification preferences.
• Family sharing — if you invite a parent or guardian, we store that link and what you've agreed to share. They see the read-only view you consented to; you can revoke it in Settings.
• School administrator claims — if you request to manage a school's profile, we collect your work email and role to verify the claim, and we keep an audit log of edits made through the school and staff consoles.

Information collected automatically

• Server logs — like nearly every website, our servers record requests (IP address, browser user-agent, page requested) for security and troubleshooting.
• Aggregate metrics — we measure things like request counts and response times on infrastructure we host ourselves. These are counters, not profiles: there is no third-party analytics service, no advertising pixel, and no cross-site tracking on prereqs.info.

Signing in with Google, Apple, or Facebook

If you choose a social sign-in, the provider sends us your account identifier, your name, and your email address (plus whether the provider has verified that email). We use it to create or sign in to your prereqs.info account and for nothing else. We never see your password for those services, and we can't post or act on your behalf.

prereqs.info's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We set only first-party cookies that make the product work — none of them track you across other sites:

• Session — keeps you signed in; expires after 30 days.
• Sign-in flow — two short-lived cookies (10 and 15 minutes) that protect a social sign-in while it's in progress.
• Last sign-in method — remembers which button you used last so we can point you back to it; kept for a year.

Your light/dark theme choice is saved in your browser's local storage and never leaves your device.

How we use your information

• To provide the product: matching your logged courses against program requirements, tracking deadlines, and the rest of what you see on screen.
• To email you: verification codes, password resets, alerts when a sign-in method is added to or removed from your account, and the reminders and updates you've turned on in notification settings.
• To keep the site safe: abuse prevention, bot protection, and debugging.

Who we share it with

We never sell personal information, and we don't share it with advertisers. The only parties that touch your data are the services that run the site:

• Cloudflare — sits in front of the site as our network layer and provides the Turnstile bot check on signup and login. Backup copies are also stored encrypted with Cloudflare R2.
• Twilio SendGrid — delivers the emails described above.
• DreamHost — hosts our servers and database.
• Google, Apple, or Facebook — only if you use their sign-in, as described above.

Beyond that, we would disclose data only if legally required to.

Retention and deletion

Your data stays as long as your account does. Settings → Delete account permanently removes your account and everything attached to it — course log, tracked programs, reminders, sharing links — in one immediate step. Encrypted database backups age out on a rolling schedule and are gone within 30 days of a deletion. Aggregate metrics (which contain no personal data) are kept for 90 days.

Children

prereqs.info is not directed at children under 13, and we don't knowingly collect their data. The family-sharing feature is for a student's own chosen parent or guardian and only shows what the student consented to share.

Your choices

• Edit your profile, notification, and sharing settings any time in Settings.
• Connect or disconnect sign-in methods in Settings (you'll always keep at least one way to sign in).
• Delete your account yourself — no support ticket needed.
• For anything else — including a copy of your data — email [email protected].

Changes to this policy

If we change this policy in a way that matters, we'll update the date at the top and note the change prominently on the site before it takes effect.