Privacy notice

01What we collect

• When you create an account: your name, email address, date of birth, and a password, which we store only as a hash.
• When you apply to a competition: your school and grade, city and district, phone number, an identity document (ID card or passport) with its number, your parents' names, and a guardian's name, phone number, and email if you are a minor.
• When you use the platform: your progress through the syllabus, practice problems, qualifying round answers and results, forum posts, and documents you upload.
• For security, when you sign up and each time you sign in: your IP address, the country and network it belongs to, your browser and its version, your operating system, your device type and model, your screen and window size, your time zone, and your browser's language. An audit log of sensitive actions also records the IP address and browser used. The country and network are looked up on our own servers; your address is not sent to anyone to do it.

Your phone number, identity document number, parents' names, and any two-factor secret are encrypted in the database. Identity documents are stored in private storage that only authorized organizers can open, and only through a short-lived link.

02Why we collect it

To run the competitions: to confirm you are who you say you are and are eligible, to assign you a computer lab and a session, to mark your paper, and to publish results. To run the platform: to keep your account secure and your progress saved. To contact you about the Olympiads you have entered.

We do not sell your information, use it for advertising, or profile you. We do measure how the site is used, so we can find what is confusing or broken and fix it. The section on analytics below explains how.

03Who sees it

The organizers of the Olympiad you have entered see your application and results. Invigilators see the names on their room's list. Other members see your name and what you post in the forum. Nobody else sees your identity document or contact details.

The platform runs on Railway's infrastructure. Your data is stored on their servers under their security terms. Email is sent through a transactional email provider that sees your address and the message.

04Analytics and session replay

We measure how the site is used with an analytics tool that we run ourselves. What it collects stays with LASO and is not shared with anyone else.

It records the pages you visit, the page you came from, your browser, device, screen size and language, your country (worked out from your IP address, which is not stored), and how quickly pages load. Visits are counted under a random identifier that changes regularly and is not linked to your account.

On some visits it also records where people click and scroll, and a short replay of how a page was used. Replays never include what you type, and your name and email are hidden. Pages that show personal data are never recorded: your application, profile, settings, grades, exam details and seat, the exam itself, the leaderboard, the forum, and all organizer pages.

If your browser sends a Do Not Track or Global Privacy Control signal, none of this is collected.

05Cookies and storage

One cookie, for your session, so you stay signed in. It is not used for anything else, and our analytics sets none. Your theme and language choices are kept in your browser's local storage and never leave it.

06How long we keep it

LASO organizes a national competition, and the record of who sat it, where, and with what result is the competition's own record. Applications, answer papers, results, and the identity details that support them are kept in the Olympiad archive for as long as the association exists. Study progress and forum posts are kept for as long as the platform holds them. The address and device you signed up from, and those of your latest sign-in, are kept for as long as your account exists; the record of each other sign-in is deleted a month after that session ends. The audit log is kept with the rest of the archive. Analytics data, replays included, is kept indefinitely.

07Your rights

You can see and correct your details in your profile, and download a copy of everything we hold about you from the settings page. You can close your account from the same page: you are signed out everywhere, you can no longer sign in, and nothing further is collected about you. Closing an account does not remove the records of the competitions you took part in; those stay in the archive, with your details, for the reason given above.

To ask for a copy of your data, or for anything this page does not cover, write to contact@lbaso.org.