Your data on Epi Hub

What it keeps

• Your account: your username, the name you pick, and your password. The password is stored scrambled (hashed), so no one can read it, not even the course rep.
• Your calendar links for Outlook and Canvas, if you add them. They're stored encrypted and only used to fetch your timetable and Canvas dates. The sessions and dates fetched from them are only visible to you.
• Your progress: what you've ticked off, your own due dates, reading times, exam topics, and how hard you found problem sets.
• What you share with the class: weeks you paste, files you upload, Q&A posts, R fixes and revision sessions.
• Notifications: if you turn them on, your browser's push address, so reminders can reach your phone.

It doesn't ask for your email, and there are no ads, trackers or analytics. It sets two cookies: one keeps you signed in, and one remembers light or dark mode.

Who sees what

• Only you: your calendar, your own due dates and anything you haven't chosen to share.
• Your study group: what you've done, when you're stuck and which revision sessions you're going to, but only if you allow it. You can share with the whole group, chosen people, or nobody, and change it any time in Sharing settings.
• Always anonymous: how hard you found a problem set and how long it took. These only show as group totals, and only once at least 3 people have answered.
• Everyone in the class: weeks, files, R fixes, and Q&A posts. Your name shows on posts unless you post anonymously.
• The course rep (admin): names, usernames, join dates and study groups, to sort out groups and reset passwords. The admin page doesn't show anyone's progress or calendars.

The course rep also runs the server and the database, so they could in theory look at stored data directly. They only do that to fix problems. Calendar links stay encrypted and passwords stay hashed even then.

Where it's kept

Everything, the database and uploaded files, is kept on the one server that runs Epi Hub. None of it is shared with anyone else.

Getting your data deleted

Ask the course rep and they'll remove your account. That deletes your account, progress, calendar links, notifications, posts and revision sessions for good. Weeks and files you added for the class stay, so nobody else loses them, but your name comes off them.