Privacy Policy

Scope of this Policy

SIRIUS is an independent educational platform operated by an individual operator. This Policy applies to the website, web application, messages, forms, and related features.

The SIRIUS operator personally handles data-protection requests. There is no company, institution, or public-facing office, and communications take place electronically through admin@support.sirius-24.com.

Data we handle

SIRIUS does not request a national ID number, home address, phone number, payment data, or patient data.

We handle only:

• Data entered by the user, such as name, email, pseudonym, academic year, and messages.
• Data created during use, such as answers, progress, statistics, bookmarks, and challenges.
• Limited technical data required for sign-in and security, such as the login session, request time, and a hashed fingerprint used to prevent abuse.
• A screenshot if the user chooses to attach one when reporting a problem.

Why do we use data?

• Creating accounts, signing users in, and recovering passwords.
• Saving progress, answers, and statistics.
• Operating rankings, friends, and challenges.
• Responding to messages and reports and fixing problems.
• Protecting accounts and the platform from hacking and abuse.
• Developing SIRIUS and improving questions and the user experience.
• Complying with a legal obligation or a valid order from a competent authority.

Sale and sharing of data

SIRIUS does not sell or rent user data, provide it to advertising entities, or share it with a third party for that party's independent marketing purposes.

The platform uses technical service providers only to the extent needed to provide the service:

Using these providers is not a sale of data. Processing may take place on servers outside Egypt. We may disclose specific data if required by law or by a valid court order.

Advertising and sponsorship

SIRIUS may display general advertisements, sponsorships, or promotional offers within the platform and may change their location or appearance without separate notice before each advertisement.

The appearance of an advertisement does not mean that we guarantee the product or advertiser. We do not use a user's name, image, messages, or performance in a public advertisement, and we do not provide their data to an advertiser, except on a basis permitted by law.

If we add personalized advertisements or tracking tools, we will update this Policy and provide the legally required choices.

Messages and screenshots

A user may send a message with or without an account, and it will then appear to the administration under the name “Anonymous User.” The platform may use limited technical data to prevent automated messages; therefore, we do not promise absolute technical anonymity.

Attaching a screenshot is optional, and it is not captured or uploaded unless the user chooses to do so. Do not send:

• Personal data or personal images.
• A password or recovery code.
• A private conversation or another person's data.
• Material that the user does not have the right to share.

The screenshot is used for diagnosing the problem, support, and security, and only authorized administrators may view it.

Leaderboard

A pseudonym, avatar, ranking, and some performance indicators may appear. The email address does not appear on the leaderboard, and Ghost Mode can be used to hide the account from it.

The results are not a university record or an official assessment.

Cookies and storage technologies

SIRIUS currently does not set Cookies and does not use Google Analytics, advertising tools, session recording, or cross-site tracking; therefore, no “Accept Cookies” request is displayed.

The platform uses browser storage to operate the service:

• localStorage: for the login session, theme, preferences, progress, and temporary copies of questions.
• sessionStorage: for saving the page and examination session within the tab.
• Cache Storage: for accelerating the website and operating it as a web application.

This data can be cleared through browser settings, which may result in signing out or losing progress that has not been synchronized. If we add non-essential tracking, we will request a choice when required by law.

Retention and security

We retain data while the account is active or while it is needed to provide the service, support, or protection. When it is no longer needed, we delete it or separate it from the user's identity, taking account of temporary backups and anything that must legally be retained.

SIRIUS uses HTTPS connections, passwords stored as hashes that cannot be read directly, administrative permissions, rate limiting, file checks, and security logs.

User rights

Under the law, a user may request:

• Knowledge of and access to their data.
• Correction or updating of their data.
• Deletion when there is no legal reason to retain it.
• Objection to unlawful processing.

Minors

SIRIUS is intended for users who are 18 years of age or older. No person under the age of 18 may create an account. If an account is found to have been created in violation of this requirement, the account may be suspended and its data deleted, and a parent or legal guardian may contact us to request deletion.

Changes and contact

This Policy may be updated when the service or the law changes. We will publish the new version and its date and will request fresh consent if we add an optional purpose that requires it.

This Policy is governed by Egyptian Personal Data Protection Law No. 151 of 2020, its Executive Regulations, and the related Egyptian laws.