Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your username, email address (optional), and password (stored as a bcrypt hash — we never see your actual password). If you sign in with Google, we receive your Google profile name and email.

Reviews: When you submit a review, we store the content, rating, tags, and whether you chose to post anonymously.

Usage Data: We may collect basic analytics such as page views and referral sources. We do not use tracking cookies or third-party advertising trackers.

2. How We Use Your Information

• To provide and maintain the Guru Scan service
• To display your reviews (with your username or anonymously, as you choose)
• To calculate and display guru ratings
• To authenticate your account and prevent abuse
• To communicate with you about your account if needed

3. Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your reviews are publicly visible (unless posted anonymously). We may share information if required by law.

4. Data Sources

Guru and course information (names, ratings, review counts) is sourced from publicly available Whop pages. We are not affiliated with Whop. Review text from Whop is not copied — only aggregate ratings and counts are displayed.

5. Cookies

We use a single session cookie (gurusan_session) to keep you logged in. This cookie is HTTP-only, secure, and does not track you across other websites. We also store your theme preference in localStorage.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), signed session tokens (HMAC-SHA256), and rate limiting on authentication endpoints.

7. Your Rights

You can request deletion of your account and associated data by contacting us. You can update or delete your reviews at any time while logged in.

8. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

Questions about this policy? Reach out via X at @fwasty.