Privacy
Students don't sign up or give an email. Here is everything Salus keeps, where it lives and for how long.
In your browser
- Anonymous ID
- A random code made the first time you visit, plus the display name you type, if any. It is how the site knows which attempts are yours.Until you clear this site's data
- Answers in progress
- A copy of your answers while you sit an exam, so a refresh or a dropped connection loses nothing.Removed when the attempt ends
- Theme
- Light or dark, if you change it.Until you clear this site's data
On our server
- Your attempts
- Answers, flags, scores, start and finish times, the class you joined and your display name. Linked to a scrambled (hashed) copy of your anonymous ID, never the ID itself.Until a tutor or the admin deletes them
- Share links
- Only if you make one. You can revoke it from the same browser.Until revoked or the attempt is deleted
- Hashed IP address
- A one-way hash of your IP address, used only to stop abuse (rate limits) and for the staff audit log. The address itself isn't kept.Deleted after 30 days
Your tutor sees the attempts made with their class code. The admin can see all attempts. Nobody else can, unless you share a link.
Moving your progress to another device
Your history is tied to the anonymous ID in this browser. Use Export progress on your history page to download salus-progress.json, then Import progress on the other device. Export before clearing your browser data, or your past results can't be found again.
The file contains your anonymous ID. Anyone who has it can see and continue your attempts, so keep it private, like a password.
Deleting your results
Ask your tutor to delete attempts made in their class, or ask the site admin for any other attempt. Deleting is permanent and also removes the attempt's share links. Clearing your browser data removes only what's in your browser, not what's on the server.
Tutors and the admin
- Email and role
- Used only to send sign-in codes and invitations.While the account exists
- Sign-in record
- Sign-ins, sign-outs and failed codes in the audit log, with a hashed IP address. The sign-in system also keeps the IP address and browser of each session, and a per-address request counter.IP addresses and hashes deleted after 30 days
Signing in sets a session cookie, which expires after 7 days without use.
What we don't collect
- No student emails, real names or accounts. A display name is optional unless you join a class.
- No advertising or analytics trackers.
- No IP addresses beyond the 30 days above.