隐私 Privacy Policy

Your Stanford email address, and the time you last signed in with an email code or with Google. We use these to confirm that only current Stanford accounts can see course group QR codes.

If you sign in with Google, Supabase Auth also keeps the basic profile Google returns (name, profile photo URL, and your Google Workspace domain, which must be stanford.edu). We only request the openid, email and profile scopes.

The group requests you submit (course and time), so we can create the group and email you when it is ready.

We don’t sell or share your data, show ads, or use analytics or tracking cookies. The only cookie is the essential Supabase Auth session cookie that keeps you signed in.

Supabase (database and sign-in), Vercel (hosting), Resend (sign-in codes and “your group is ready” emails), and Cloudflare Turnstile (bot protection on the sign-in form). Each processes data only to provide that service.

Course group chats themselves are hosted on WeCom (企业微信); what you share there is governed by WeCom’s own terms.

Email treecourse.service@gmail.com from your Stanford address and we will delete your account and requests.