Privacy policy
About this policy
The International Sirat Olympiad 3.0 is run by the organiser named at the bottom of this page. This policy explains what we collect through this website, why we collect it, who can see it and how long we keep it. We have written it to match how the website really works.
What we collect
When you register: your name, mobile number, email address, district, institution, type of education and class, and the promo code of an ambassador if you used one. Your password is stored only in a scrambled form that cannot be turned back into the password.
When you pay: PayStation tells us the invoice number, the amount, whether the payment went through, and its transaction reference. You enter card or mobile wallet details on PayStation’s own page, and they never reach us.
When you take an exam: your answers, when you started and submitted, your score and the time you took. The exam page also records when you leave it for another tab or app, when developer tools are opened, and when your connection drops and comes back.
In a video round: the link to the video you send.
For the free book, if you ask for it after registering: the name and mobile number of the person who receives it, the district, upazila and address, and a note for the delivery if you add one.
To keep accounts safe: records of sign-ins, including the browser they came from, and a record of what the organiser’s staff do in the admin area. IP addresses have their own section below.
Why we use it
To register you and confirm your payment, let you sign in, run the exams fairly, work out and publish results, move students between rounds, issue certificates, and keep the website and your account secure.
We email you only to confirm your email address and when you ask to reset your password. We do not use your information for advertising, and we never sell it.
Who can see it
The public: nothing. Every page with your information needs you, or the organiser’s staff, to be signed in.
Other students: after the results of an exam are published, signed-in participants can see its leaderboard. It shows each student’s rank, name and institution, and nothing else: never your score, time, mobile number or email.
You: after the results are published, you can see your own score, your answers and the correct answers on your dashboard.
Judges in a video round see an entry number, the group and your video link, never your name or contact details.
The free book’s delivery details: you and the organiser’s administrators.
Ambassadors: an ambassador whose promo code you used sees only how many students used it, not who they are. If you join an ambassador team, the other members see only your first name.
Certificates: anyone you give your certificate code to can check it. The check shows only your name and the award.
The organiser’s staff: administrators can see registration details, payments and exam records so that they can run the olympiad; managers can see the full leaderboard with emails and scores. Administrators sign in with a password and a code from an authenticator app, and their actions are recorded.
Service providers
A few companies handle data on our behalf, only for these jobs:
PayStation takes your payment. You enter card or mobile wallet details on PayStation’s page; we never see them.
Amazon Web Services sends our two kinds of email (confirming your email address and resetting your password) through its email service, Amazon SES.
Hostinger provides the server this website and its database run on.
The courier that delivers the free book receives the recipient’s name, mobile number and address, in a list the organiser’s administrators send it.
IP addresses
We store the IP address your device uses: with each sign-in session, in our security and audit records (for example failed sign-ins, and what the organiser’s staff do), and for a short time in the counters that limit repeated sign-in attempts.
We use it to keep accounts safe, to spot misuse and fraud, and to stop repeated attempts.
Sign-in sessions are deleted 30 days after they end, and the sign-in counters expire within two days. Security and audit records are kept. The server’s own logs also contain IP addresses; they are overwritten as they fill up.
How long we keep it
Your account, your exam answers and results, and your payment records are kept; they are not deleted automatically. You can ask us to delete your account (see “Your rights” below).
A registration you started but did not finish: the form, with your password, is deleted 30 days after your last step. When a registration is completed, that copy of the form is deleted at once.
Sign-in sessions are deleted 30 days after they end, and the links we email you are deleted 7 days after they expire.
The free book’s delivery details can be changed until the book is sent, and are locked after that. They are not deleted automatically.
Encrypted backup copies of the database are kept outside the server; the oldest is about five weeks old.
Security and audit records are kept (see “IP addresses” above).
Students under 18 and their parents
Many participants are under 18. If you are under 18, a parent or guardian should know about and agree to your registration.
A parent or guardian can write to us at any time to see, correct or delete their child’s information. They have the same rights as every participant (see “Your rights” below).
We collect only what the olympiad needs: no date of birth, no photo and no details about parents or guardians.
Cookies
We use only the cookies the website needs: to keep you signed in, for the second sign-in step of an administrator, to let you continue a registration you started, and to remember your language. There are no advertising, analytics or tracking cookies, and no tracking tools from other companies.
Your rights
You can see your details and correct your name, mobile number, district, institution and type of education in your dashboard profile. To correct your email address or your class, write to us; your class can be corrected only before your first exam.
You can ask us what information we hold about you, or ask us to delete your account. When we delete an account, we close it and remove what we can. We keep payment records, submitted exams and results, and security records, because we need them to answer payment questions, keep results fair and keep the website safe.
Use the contact details at the bottom of this page.
Changes to this policy
Last updated: 3 November 2026. If we change this policy, we will publish the new version on this page.