中文
简要结论
当前版本无需账户，不设置第一方 Cookie，不使用广告追踪器，也不在浏览器中保存你的查询历史。浏览器会保存语言与主题偏好，并在当前会话中暂存最多三项候选课程；使用评价功能时还会保存一个随机评价者令牌，用于避免同一浏览器对同一对象生成重复记录。我们不出售个人信息，也不将个人信息用于定向广告。
请不要在搜索框或文字评价中输入姓名、联系方式、健康、财务或其他敏感信息。
我们处理的信息
- 你主动提交的查询词、国家代码、指标、日期、DOI、州代码和结果条数。
- 浏览器本地界面状态：语言与主题偏好保存在 localStorage；最多三项候选课程保存在 sessionStorage，并在会话结束时清除。保存这些界面状态本身不会把它们发送到服务端。
- 你主动提交的分项评分、可选文字评价、语言、CRICOS 实体身份，以及随机评价者令牌的 SHA-256 摘要。原始随机令牌仅保存在你的浏览器本地存储中。
- 为限制滥用，服务端会把 Cloudflare 提供的连接 IP 与仅保存在服务端的随机密钥组合后计算 SHA-256 速率键；评价表不保存原始 IP。
- Cloudflare 为传输、安全和运行服务通常需要处理的网络与设备元数据，例如 IP 地址、时间、请求路径、用户代理和安全事件。
- 服务端验证结果、错误和性能记录，用于可靠性、安全和故障排查。
查询去向
浏览器把查询发给 DegreeSignal 的同源 Cloudflare Worker。根据你选择的来源，Worker 可能把必要的查询参数转发给 World Bank、Crossref 或澳大利亚 data.gov.au。CRICOS 与 IPEDS 快照查询在绑定的 D1 索引内完成。第三方来源按各自隐私条款处理请求。
目的、保存与披露
信息仅用于返回查询结果、验证来源、接收和审核社区评价、保护服务、诊断错误和衡量运行可靠性。评价提交先标记为待审核，只有审核通过的分项评分和文字内容才会公开。当前代码未集成第三方分析、广告或营销 SDK。运行日志和评价的保留取决于基础设施配置和必要的审核、安全与运维周期；我们不会宣称一个未在系统中强制执行的固定期限。
选择与联系
你可以不使用服务或避免提交任何可能识别个人的信息。当前版本没有账户资料可供导出或删除。隐私问题可通过 项目问题页 联系维护者；该页面公开，请不要提交个人或敏感信息。
English
In short
The current public beta requires no account, sets no first-party cookies, uses no advertising trackers, and does not store your query history in the browser. It stores language and theme preferences and keeps up to three shortlisted courses for the current session; using reviews also stores a random reviewer token to prevent the same browser creating duplicate records for one entity. We do not sell personal information or use it for targeted advertising.
Do not enter names, contact details, health, financial, or other sensitive information in search fields or written reviews.
Information processed
- Queries, country codes, indicators, dates, DOIs, state codes, and row limits you submit.
- Local interface state: language and theme preferences are stored in localStorage; up to three shortlisted courses are stored in sessionStorage and cleared when the session ends. Saving these interface states does not itself send them to the server.
- Dimensional ratings, optional written reviews, locale, CRICOS entity identity, and a SHA-256 digest of a random reviewer token that you choose to submit. The original random token remains in your browser's local storage.
- To limit abuse, the server combines the connecting IP supplied by Cloudflare with a server-only random secret and computes a SHA-256 rate key; the review table does not store the raw IP.
- Network and device metadata Cloudflare normally needs for delivery, security, and operations, such as IP address, time, request path, user agent, and security events.
- Server-side validation outcomes, errors, and performance records used for reliability, security, and diagnosis.
Where queries go
Your browser sends queries to the same-origin DegreeSignal Cloudflare Worker. Depending on the selected source, the Worker may forward necessary query parameters to World Bank, Crossref, or Australian data.gov.au. CRICOS and IPEDS snapshot searches run against the bound D1 indexes. Third-party sources process requests under their own notices.
Purpose, retention, and disclosure
Information is used only to return results, validate sources, receive and moderate community reviews, protect the service, diagnose errors, and measure operational reliability. Review submissions start as pending; only approved dimensional ratings and text become public. The current code includes no third-party analytics, advertising, or marketing SDK. Operational log and review retention depends on infrastructure settings and necessary moderation, security, and operations; we do not promise a fixed period that is not technically enforced.
Choices and contact
You may avoid the service or refrain from submitting anything that could identify a person. There is currently no account profile to export or delete. Contact maintainers through the project issue tracker; it is public, so do not include personal or sensitive information.
