Privacy Policy

UniArchive (“we”, “our”, “us”) is an academic resource platform serving Nigerian university students and secondary school exam candidates. This policy explains what information we collect, how we use it, and how we protect it.

• Account info: your name, email address and username. If you register with email, we also store your password, but only as a one-way (bcrypt) hash, never the password itself.
• Profile info you choose to add: phone number, date of birth, bio and profile photo.
• Academic info: university, faculty, department, level and semester.
• Activity on UniArchive: the materials you open, your reading progress, highlights and bookmarks, comments, reactions, submissions and badges.
• Uploaded content: PDF documents you upload and your profile photo.
• Google sign-in: if you sign in with Google, we receive your name, email address, profile photo and a Google account identifier. We never receive your Google password or access any other data in your Google account.
• Technical info: when you sign in, we record your IP address and a general device type (such as “Mobile Device” or “Chrome Browser”) with that session. We also use IP addresses briefly to limit repeated requests and prevent abuse.

• To provide the UniArchive service, including your library, reader and profile.
• To personalise your experience, such as resuming where you stopped reading.
• To review and verify the materials you contribute.
• To send account emails, such as verification codes and password reset links, and to show in-app notifications.
• To keep the platform secure and prevent abuse.

We do not sell your data to third parties, and we do not share it with advertisers.

Some information is public by design. Your public profile (name, username, photo, bio, role, institution, faculty, department, level, number of verified materials and join date), the materials you publish and your comments can be seen by other visitors.

We use these service providers to run UniArchive:

• MongoDB Atlas (cloud database): your account, profile, activity and session records.
• Cloudinary: PDF files up to 10 MB, the page images shown in the reader, and profile photos.
• Backblaze B2: PDF files larger than 10 MB.
• Upstash (Redis): short-lived security data, such as request counters used for rate limiting.
• Vercel: hosts the website and runs our servers.
• Google: Google sign-in, and Gmail for sending account emails.

How we protect your data:

• Your email address and phone number are encrypted in our database (AES-256).
• Passwords are stored only as bcrypt hashes.
• Sign-in session tokens, email verification codes and password reset codes are stored only as hashes, never in readable form.
• Books you save for offline reading are stored encrypted in your own browser.

Sign-in sessions expire and are deleted after 7 days.

• View and update your information on your profile and settings pages.
• Request account deletion by contacting us at emmanueldike275@gmail.com. We will process your request within 30 days.
• Access your uploaded materials through the platform at any time while your account is active.

• We use httpOnly cookies for sign-in only: a session cookie that lasts up to 7 days, and a short-lived access cookie that is renewed about every 15 minutes. Google sign-in also sets a few temporary cookies that last only for the sign-in itself.
• We do not use advertising, analytics or tracking cookies.
• Your browser also stores some things on your device: your theme preference, which prompts you have dismissed, unsaved drafts and pending uploads, and encrypted copies of books you save for offline reading. Clearing your site data removes them.

Questions about this policy or your data? Contact us:

• Email: emmanueldike275@gmail.com
• Website: https://www.uniarchive.com.ng