سياسة الخصوصية

Privacy policy (English)

Sabboura («سبّورة») is a website of interactive lessons for Algerian middle-school pupils (4AM). This page explains what we keep about you, why, where, and how to have it deleted.

What we keep

• When you create an account: your name, your phone number or e-mail address, and your password — stored only as a one-way hash (scrypt), never the password itself.
• When you sign in with Google: your Google account identifier, your name and your e-mail address verified by Google (scopes openid, email, profile). Nothing else: we never read your mail, files or contacts, and we do not keep the access tokens Google sends.
• The board style you choose (green chalkboard or white board), and when your account was created and last used.
• To protect accounts from guessing, short-lived counters of login attempts per account and per network address, stored as hashes, never the address itself.

We use no analytics, no advertising and no cross-site tracking.

Why

To create your account and open the lessons for you, to remember your board style on all your devices, and to protect the site and the accounts from abuse. We do not sell your information, share it with anyone, or use it for advertising.

Cookies

• sabboura_session keeps you logged in (30 days; not readable by the page's scripts).
• sabboura_board remembers your board style (400 days).
• sabboura_form carries, for a few seconds, the answer of a login or sign-up form: its errors when the browser runs without JavaScript, and the result of a Google sign-in.
• sabboura_oauth protects the Google sign-in against forgery, for its duration only (10 minutes at most).

All of them are needed for the site to work; none is used for advertising or analytics.

Where it is kept

The site runs on Vercel and the accounts are stored in a database at Supabase, in data centres in Paris (France); both process the data on our behalf, only to run the site. Connections are encrypted (HTTPS); the hosting keeps short-lived technical logs of requests, as for any website.

How long, and deleting your account

We keep your account's information as long as your account exists; a login session ends after 30 days or when you log out. To correct your information, or to delete your account and all its information, e-mail abdeslam.dib.usa@gmail.com with the phone number or e-mail address of your account: we delete it within 30 days. If you signed in with Google, you can also remove Sabboura's access at myaccount.google.com/permissions.

Minors

The site is meant for middle-school pupils. If you are a minor, ask your parent or guardian before creating an account; a parent or guardian may ask us to delete their child's account at any time.

Google user data

Sabboura's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: it is used only to sign you in to your account.

Changes and contact

If this policy changes, this page is updated. Questions: abdeslam.dib.usa@gmail.com