Feedback
Privacy

What we store, and why.

Last updated 4 November 2026.

Browsing without signing in

The site keeps no record of you. It sets a security cookie (csrftoken) that protects forms from forgery. Fonts load from Fontshare and Google Fonts, and scripts from jsDelivr, so those services receive your IP address as part of loading the page.

When you sign in with Google

Sign-in accepts only verified IIT Madras BS student accounts. We store:

  • your email address, name and Google account ID;
  • the basic profile Google returns at sign-in (for example your profile picture link and whether your email is verified);
  • when your account was created and when you last signed in.

We use these only to sign you in and to show your name on the site. We do not store your Google password or any Google access token, and we run no analytics or advertising trackers.

Joining the house groups

The name and WhatsApp number you type on the Join page are not sent to or saved by this website. They go from your browser to the house's Google Form, which opens with them filled in, and they reach the house team only when you press Submit there. Your browser keeps a note that the form was filled, on your own device only. The girls' community and Web Ops have their own forms, run by the house; each says what it collects.

Invite links to the house's WhatsApp groups open only for signed-in IIT Madras BS student accounts.

Feedback

The feedback page saves what you write: your rating, the parts you picked, your notes, the device you chose, the name you type (optional) and the page you came from. If you are signed in, your account email is saved with it so the team can reply. We also keep a one-way scrambled form of your IP address to stop spam; it cannot be turned back into the address.

Cookies

sessionid keeps you signed in, csrftoken protects forms, and messages carries one-time notices such as "You have signed out." All three are needed for the site to work.

Who can see it

Your data sits in the house website's database. Only council members with website admin access can view it.

Deleting your account

Ask the Web Admin listed on the council page. Your account is removed from the database, not hidden.