Privacy Policy

Scope of this Policy

SIRIUS is an independent educational platform operated by an individual operator. This Policy applies to the website, web application, messages, forms, and related features.

The SIRIUS operator personally handles data-protection requests. There is no company, institution, or public-facing office, and communications take place electronically through admin@support.sirius-24.com.

Data we handle

SIRIUS does not request a national ID number, home address, phone number, payment data, or patient data.

We handle only:

• Data entered by the user, such as name, email, pseudonym, academic year, and messages.
• Data created during use, such as answers, progress, statistics, bookmarks.
• Limited technical data required for sign-in and security, such as the login session, request time, and the IP address recorded at sign-in to prevent abuse and protect the account.
• A screenshot if the user chooses to attach one when reporting a problem.
• Video usage data: counts of explanation-watch, full-video, and MP4-download clicks, grouped per account per day.
• Suggestions and reports the user sends about questions and explanations.

Why do we use data?

• Creating accounts, signing users in, and recovering passwords.
• Saving progress, answers, and statistics.
• Operating rankings.
• Responding to messages and reports and fixing problems.
• Protecting accounts and the platform from hacking and abuse.
• Developing SIRIUS and improving questions and the user experience.
• Complying with a legal obligation or a valid order from a competent authority.
• Measuring the platform’s speed on users’ devices, and counting use of explanation videos and protecting their rights.

Sale and sharing of data

SIRIUS does not sell or rent user data, provide it to advertising entities, or share it with a third party for that party's independent marketing purposes.

The platform uses technical service providers only to the extent needed to provide the service:

Using these providers is not a sale of data. Processing or storage may take place on servers outside Egypt, and the procedures prescribed by the Personal Data Protection Law and its Executive Regulations are applied in that regard. These providers are bound to us by processing agreements and controls preventing any use of the data beyond delivering their service. We may disclose specific data if required by law or by a valid court order.

Advertising and sponsorship

SIRIUS may display general advertisements, sponsorships, or promotional offers within the platform and may change their location or appearance without separate notice before each advertisement.

The appearance of an advertisement does not mean that we guarantee the product or advertiser. We do not use a user's name, image, messages, or performance in a public advertisement, and we do not provide their data to an advertiser, except on a basis permitted by law.

If we add personalized advertisements or tracking tools, we will update this Policy and provide the legally required choices.

Messages and screenshots

A user may send a message with or without an account, and it will then appear to the administration under the name “Anonymous User.” The platform may use limited technical data to prevent automated messages; therefore, we do not promise absolute technical anonymity.

Attaching a screenshot is optional, and it is not captured or uploaded unless the user chooses to do so. Do not send:

• Personal data or personal images.
• A password or recovery code.
• A private conversation or another person's data.
• Material that the user does not have the right to share.

The screenshot is used for diagnosing the problem, support, and security, and only authorized administrators may view it.

Suggestions and administration messages: Suggested edits and reports sent from an account reach authorized administrators together with the account, for review, and we may send a thank-you message inside the platform if one is accepted. The administration may send operational announcements to users’ inboxes, and they may be deleted for everyone.

Leaderboard

A pseudonym, avatar, ranking, and some performance indicators may appear. The email address does not appear on the leaderboard, and Ghost Mode can be used to hide the account from it.

The results are not a university record or an official assessment.

Video, presence and measurement

Details of what the platform does when you use its newer features:

• Explanation videos: We record click counts only (watching a question’s explanation, opening the full video, downloading an MP4) per account per day, for administration statistics, improving content, and protecting its rights. We do not record in your account how long you watched or which parts you watched. The resume position of a chapter video is kept in your browser only. Videos are served from the platform’s own hosting, with no external video platform.
• Teacher accounts authorized to record: The details of each recording (recorder, date, length, size, subject, and chapter) are stored to manage the videos.
• Presence: The app sends a periodic activity signal so administrators can see how many students are online, and so the subject you are solving can show to others in your Universe room if you are sitting in one; you count as online if your last activity was a few minutes ago.
• Clearing mistakes: Clearing your mistakes list hides the items from your lists, but their trace may remain in your statistics and progress history. To delete your data entirely, use account deletion.
• Speed measurement: We sample a small share of page views and receive performance numbers only (load and interaction times, screen width, the device’s processor count and approximate memory, approximate network type, and theme). The sample is anonymous by design: it contains no account, name, email, or text you entered. It is used only to improve speed, and an IP address may be used temporarily to limit abuse.
• Usage analytics (Microsoft Clarity): To improve the website, we record how pages are used: clicks, taps, scrolling, the pages you open, time spent on them, and the device and browser type. Clarity uses this to show us session replays and heatmaps. It is linked to your account number only (never your name or email). Typed text (passwords, notes, messages) and private areas (the AI chat, notifications, reports, Universe rooms, and your identity card) are hidden before anything leaves your device. The data is processed by Microsoft; replays are kept for about 30 days. It is on by default, and you can switch it off at any time in Settings → “Share usage data”, which stops it immediately on that device.

Cookies and storage technologies

SIRIUS itself does not set Cookies, and does not use Google Analytics, advertising tools, or cross-site tracking. The only exception is Microsoft Clarity usage analytics (see “Video, presence and measurement”), which sets its own first-party cookies (such as _clck and _clsk) to tie one visit together. Switching off “Share usage data” in Settings stops Clarity and erases those cookies.

The platform uses browser storage to operate the service:

• localStorage: for the login session, theme, preferences, progress, the resume position of a chapter video, your “Share usage data” choice, and temporary copies of questions.
• sessionStorage: for saving the page and examination session within the tab.
• Cache Storage: for accelerating the website and operating it as a web application.

This data can be cleared through browser settings, which may result in signing out or losing progress that has not been synchronized. If we add non-essential tracking, we will request a choice when required by law.

Retention and security

We retain data while the account is active or while it is needed to provide the service, support, or protection. When it is no longer needed, we delete it or separate it from the user's identity, taking account of temporary backups and anything that must legally be retained.

SIRIUS uses HTTPS connections, passwords stored as hashes that cannot be read directly, administrative permissions, rate limiting, file checks, and security logs.

User rights

Under the law, a user may request:

• Knowledge of and access to their data.
• Correction or updating of their data.
• Deletion when there is no legal reason to retain it, including instant deletion of the whole account from the Profile page (Danger zone section).
• Withdrawal of consent to optional processing.
• Objection to unlawful processing.

Minors

SIRIUS is intended for users who are 18 years of age or older. No person under the age of 18 may create an account. If an account is found to have been created in violation of this requirement, the account may be suspended and its data deleted, and a parent or legal guardian may contact us to request deletion.

Changes and contact

This Policy may be updated when the service or the law changes. We will publish the new version and its date and will request fresh consent if we add an optional purpose that requires it.

This Policy is governed by Egyptian Personal Data Protection Law No. 151 of 2020, its Executive Regulations, and the related Egyptian laws.