Skip to content
AtlasCA · CMA · CS

Policies

Privacy

What Atlas stores about you, why, and what you can do about it. Browsing official resources needs no account.

Last updated

Without an account

You can browse subjects, official resources and the paper finder without signing up. The site loads no advertising scripts and does not set cookies for visitors who are not signed in. Like any website, the hosting provider (Vercel) receives the technical details of each request, such as your IP address, in order to serve it. To count page views, the site uses Vercel Web Analytics, which sets no cookies and records the page visited, the referring page, browser, operating system, device type and approximate country. It tells repeat visits apart only through a hash of the request that Vercel discards after 24 hours, and it does not follow you across other websites.

When you create an account

We store:

  • your name and email address, as you enter them (the email is stored in lower case);
  • your password, only as a salted one-way hash (scrypt). The password itself is never stored and cannot be read back, including by us;
  • when the account was created, its role (student or administrator) and when you last logged out.

These are used to let you sign in, to show your name in your dashboard and to keep your account separate from others.

Site administrators can see account names, email addresses and plan status in order to manage accounts.

When you use account features

If you use them, we also store:

  • which chapters you have marked as started or covered;
  • the questions you bookmark;
  • your study plan: the exam attempt, the subjects you chose and your weekly hours.

This data is only used to show these features back to you.

Sign-in cookie

Signing in sets one cookie, cse_session. It holds a signed token with your account ID, cannot be read by scripts on the page, and expires after 30 days. Logging out removes it and invalidates every earlier sign-in to your account on other devices too.

Protection against misuse

To stop password guessing and automated sign-ups, the site counts sign-in attempts per email address and per IP address, and sign-ups per IP address. These counters are stored in the database with the email or IP address they relate to.

Payments

Paid plans are not open, and this site does not collect payment details.

Who else handles the data

The site runs on Vercel, and account data is kept in a Postgres database. The site does not send emails and does not pass your details to advertisers. Official documents open on the ICSI, ICAI or ICMAI websites, which have their own policies.

Access, correction and deletion

There is no self-service account deletion or data export in the dashboard yet. Requests are handled by the operator.

A support email address has not been published yet, so there is currently no published way to send a request. See Contact & support for the current status.

Changes

This page describes the site as it works on the date above. See also the Terms of use.