Privacy Policy

We collect minimal information to provide you with the best scholarship discovery experience: • **Automatically collected**: When you visit ScholarPath, we automatically collect information such as your browser type, operating system, referring URLs, and pages visited. This is used solely for analytics to improve our service. • **Analytics data**: We use privacy-focused analytics (Umami or Google Analytics 4) to understand aggregate traffic patterns. These tools may collect your approximate geographic location (country/city level), device type, and browser. • **No personal accounts required**: You do not need to create an account to use ScholarPath. We do not collect names, email addresses, or any personally identifiable information from regular visitors.

ScholarPath uses cookies for the following purposes: • **Essential cookies**: Required for the website to function properly (e.g., session management for admin users). • **Analytics cookies**: Used to understand how visitors use our site. These are anonymized and do not personally identify you. You can opt out of analytics cookies. • **Advertising cookies**: If we display advertisements (e.g., Google AdSense, Media.net), those providers may set cookies to serve relevant ads. These are governed by the respective ad network's privacy policies. You can control and delete cookies through your browser settings. Disabling cookies may affect some website functionality.

ScholarPath integrates with the following third-party services: • **Supabase**: Our database provider. Data is stored securely in their infrastructure. • **Vercel**: Our hosting provider. Your requests are processed through Vercel's global CDN network. • **Google Analytics / Umami**: Used for website analytics. Google's privacy policy applies to GA4 usage. • **Google AdSense / Media.net**: Advertisement networks that may collect data to serve relevant ads. Their respective privacy policies govern data collection. • **Cloudflare**: DNS and CDN provider that processes traffic for security and performance purposes.

We take reasonable measures to protect the information we collect: • All data is transmitted over HTTPS (SSL/TLS encrypted connections). • Our database is hosted on Supabase with Row Level Security (RLS) enabled. • We do not sell, rent, or share your personal information with third parties for their marketing purposes. • IP addresses are hashed (anonymized) before storage in our analytics database. • We retain analytics data for a maximum of 12 months.

Depending on your location, you may have the following rights: • **Right to access**: Request what data we hold about you. • **Right to deletion**: Request deletion of your data. • **Right to opt-out**: Opt out of analytics tracking and advertising cookies. • **Right to data portability**: Request your data in a portable format. To exercise these rights, contact us at privacy@scholarpath.dev. We will respond within 30 days. **EU residents**: ScholarPath processes minimal personal data. Any processing of EU residents' data is done in accordance with GDPR principles of data minimization and purpose limitation.

If you have any questions about this Privacy Policy, please contact us: • **Email**: privacy@scholarpath.dev • **Website**: scholarpath.dev/contact This policy was last updated on June 2025. We may update this policy from time to time. Material changes will be noted at the top of this page.