We never sell or rent personal data, we run no advertising, and we embed no ad-network tracking code.
Legal · Chemiverse
Privacy Policy
Chemiverse is a visual chemistry learning platform for secondary-school students and teachers. This page sets out exactly what data we hold about you, what we use it for, how long we keep it, and what you can ask us to do.
Enough to create an account, verify teachers, place students in classes and grade their work — nothing more.
Traffic figures are plain counters per page and region. IP addresses are discarded right after the region lookup.
View, correct, withdraw consent or request deletion at any time — we respond within 30 days.
Scope of this policy
This policy covers the whole Chemiverse website and the APIs behind it: the periodic table, molecule library, virtual lab, chemistry tools, classes and online tests.
Chemiverse is run by an independent development team, reachable at huongpnit@gmail.com. When you create an account, we decide the purposes and means of processing your data. For learning data inside a class, the teacher and school are the deciding party — we process it according to the class they set up.
Data we collect
We only collect data tied to a specific feature. The table below lists every category we store:
| Category | What it includes | Why we need it |
|---|---|---|
| Account | Email, full name, phone number, password (stored hashed only — the original can never be read back), profile picture if you upload one | Creating your account, verifying your email and helping you recover access |
| Google sign-in | Email, display name, profile picture and your Google account identifier | Signing in quickly without setting up another password |
| Teacher profile | School, province and ward, staff code, and the teacher ID card image you upload | Verifying teacher status before granting the right to create classes and write tests |
| Student profile | School, province and ward, grade, class and student code | Placing you in the right class and attaching submissions to the right person |
| Learning activity | Classes you join, tests assigned to you, your answers, scores and submission times | Showing results to you and to the teacher running the class |
| Bug reports | Your description, the screen involved, any screenshot you attach, plus your email and name if you were signed in | Reproducing the problem, fixing it and replying to you |
| Technical data | IP address, browser and device type, requested paths and timestamps in server logs | Preventing abuse, applying rate limits and investigating incidents |
The traffic figures we use for administration are pre-aggregated counters keyed by (path, day) and (region, day). We store no per-visit records and keep no IP address or device fingerprint alongside those counters, so they cannot be traced back to an individual.
How we use your data
| Purpose | Data involved | Basis |
|---|---|---|
| Running your account | Account, Google sign-in | Necessary to deliver the service you asked for |
| Verifying teachers | Teacher profile | Your consent when submitting the profile, plus the need to protect classes from impersonation |
| Teaching, learning and grading | Student profile, learning activity | Delivering the service requested by you and by your teacher |
| Keeping the platform safe | Technical data | Legitimate interest in preventing abuse and protecting other users |
| Improving the content | Aggregated traffic counters, bug reports | Legitimate interest, worked on non-identifying data |
What we commit never to do:
- Never sell, rent or trade personal data with anyone.
- Never use your data for advertising or marketing profiles.
- Never use student submissions beyond grading and showing results within the class.
- Never make automated decisions that produce legal effects for you.
Cookies and browser storage
Chemiverse uses essential cookies only. There are no advertising cookies and no social-network tracking pixels:
| Name | Purpose | Lifetime |
|---|---|---|
| cid | An anonymous identifier issued and signed by our server, used solely to count API request rates. It is not linked to your account and JavaScript cannot read it (HttpOnly). | 30 days |
| chemiverse-language | Remembers whether you are reading in Vietnamese or English so the next page load renders correctly straight away. | 1 year |
| Browser storage (localStorage) | Keeps your session and language choice on your own device — it is not sent anywhere except with the requests you make. | Until you sign out or clear browsing data |
You can block or clear cookies in your browser. The effect: you will have to sign in again, and you may hit rate limits sooner than usual.
Third parties involved
We share the minimum necessary, and only with services required for a specific feature:
| Third party | Data they see | When |
|---|---|---|
| Google (sign-in) | Email, name, profile picture, Google account identifier | Only if you choose to sign in with Google |
| Google Gemini (AI test drafting) | The drafting prompt and any material the teacher supplies | Only when a teacher actively uses AI test generation |
| Email delivery service | Your email address and the content of verification or account notices | When the system needs to send you a message |
| Server infrastructure provider | Data at rest on the servers we rent | Continuously, within technical operations |
Beyond these cases, we disclose data only where the law requires it, or where it is necessary to protect the rights and safety of users and of the platform.
Some of the providers above run servers outside Vietnam. In those cases we transfer only the specific data the relevant feature requires.
How long we keep data
| Data | Retention |
|---|---|
| Account and profile | Until you ask us to delete it; the account is then disabled and can no longer be used to sign in |
| Sessions | Up to 30 days, then they expire automatically; each account keeps only its 5 most recent sessions |
| Submissions and results | For the life of the class — removed when a teacher deletes the test or class, or when you ask us to delete your account |
| System logs | 30 days, then deleted automatically |
| IP ban records | Expire with the ban itself; manual bans placed by an administrator stay until lifted |
| Traffic counters | Kept long term, as they are aggregated and no longer identify anyone |
How we protect your data
- Passwords are stored hashed only — not even an administrator can read your password back.
- All connections to the platform use HTTPS.
- Sessions use expiring, rotating tokens; signing out revokes the session on that device.
- Role-based access: teachers see only their own classes, students see only their own submissions.
- Rate limiting, plus automatic blocking of IP addresses that probe for vulnerabilities.
- Images you upload (teacher ID cards, bug screenshots) are stored separately and served only through system-issued paths; unused files are cleaned up automatically.
Your rights and how to use them
Under Vietnamese personal data protection law, you have the right to:
- Know what data about you is being processed, and request a copy of it.
- Correct or complete information that is inaccurate.
- Ask us to delete your data and your account.
- Withdraw consent you gave — for example, asking us to remove your teacher ID card once your profile has been approved.
- Object to processing, or ask us to restrict it.
- Complain to the competent authority if you believe your data has been mishandled.
You can edit most of your information yourself on the Profile page. For anything else, email us from the address you registered with at huongpnit@gmail.com — we verify your identity and respond within 30 days, free of charge.
Student data and the school's role
Chemiverse serves secondary-school students, so most of our users are minors. We treat their data with extra care:
- Students below the age of consent under local law need a parent's or guardian's permission and supervision to create an account.
- We ask only for what identifies a student within their class: school, grade, class and student code.
- Submissions and scores are visible to that student and to the teacher running the class; there is no public leaderboard.
- Parents and guardians can ask to see or delete their child's data by email; we verify the relationship before acting.
When a teacher creates a class and assigns tests, the teacher and school decide what is collected within that class. If you have a question about a specific class, ask the teacher in charge first; we are happy to support both sides.
If a data incident happens
If personal data is exposed, lost or corrupted, we contain and fix the problem first, then notify the people affected at their registered email address and report to the competent authority as required. The notice will state what happened, which data was involved and what you should do next.
Changes to this policy
We update this policy when the platform gains new features or when the law changes. The date at the top of the page always reflects the most recent revision.
For changes that materially affect your rights, we will give notice on the platform or by email before they take effect. Continuing to use Chemiverse after that date means you accept the updated policy.
Questions about your data?
Email us — even if you only want to know what the system currently holds about you. Every request is read and answered by a person.