A*IAL Grades العربية

Privacy Policy

Last updated: 1 November 2026

This policy explains what information IAL Grades (“we”, “the site”) handles, why, and the choices you have. IAL Grades is an independent project based in the United Arab Emirates. Contact: ialgrades@gmail.com.

1. Using the site without an account

You can use every tool without signing in. Your subjects, saved papers and results are then stored only in your browser’s local storage on your device. They are not sent to us.

2. Signing in with Google

If you choose “Continue with Google”, Google shares with us your Google account ID, name, email address and profile picture. This is Google’s basic sign-in information. We do not get your password or access to anything else in your Google account.

  • Stored on our servers: your Google account ID (a number that identifies your account to us), the tracker data you create (subjects, unit choices, saved papers, results and settings), and when the record was created and last updated.
  • Not stored on our servers: your name, email address and profile picture. These are kept only in your browser so the site can show who is signed in, and are removed when you sign out.

We use this information only to keep your tracker data in sync across your devices. We do not use it for advertising, we do not sell it, and we do not share it with anyone except the service providers below who run the site for us.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Legal basis

We process account data because you asked us to provide the sync service (performance of a contract) and with your consent when you sign in. You can withdraw consent at any time by deleting your account.

4. Service providers and where data is stored

  • Cloudflare, Inc. hosts the site and stores account data in its D1 database. Data may be processed in countries other than your own, including the United States.
  • Google LLC provides Google sign-in, the Readex Pro font (Google Fonts) and advertising (Google AdSense, see section 7).

5. How long we keep data

Account data is kept until you delete your account. When you choose Delete account, your record is removed from our database immediately. Copies may remain in Cloudflare’s automatic database backups for up to 30 days before they are overwritten.

6. Cookies and local storage

  • Sign-in cookie (__Host-sid): keeps you signed in for up to 60 days. It is strictly necessary for the account feature and is only set when you sign in.
  • Local storage (ialgrades:v1, ialgrades:profile, ialgrades:sync): stores your tracker data, the name and picture shown when signed in, and sync status, on your device.
  • Google may set its own cookies when you use Google sign-in and when ads are shown.

7. Advertising

This site shows ads served by Google AdSense. Google and its partners use cookies to show and measure ads, which can include ads based on your visits to this and other websites. See how Google uses information from sites that use its services. You can turn off personalised ads in Google Ad Settings or opt out of some third-party vendors at aboutads.info. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before personalised ads are shown. Your tracker data is never used for advertising.

8. Your rights

You can download all your tracker data (Account → Download my data), correct it in the app, and delete your account and data (Account → Delete account) at any time. Depending on where you live, including under the EU and UK GDPR and the UAE Personal Data Protection Law, you may also have the right to access, object to or restrict processing and to complain to your data protection authority. To use any of these rights, email us.

9. Children

The site is made for secondary-school students preparing for exams. You must be at least 13 to create an account. If you are under 16 and live in the EEA or UK, or under the age at which you can consent to data processing where you live, only sign in with permission from a parent or guardian. If you believe a child has created an account without permission, contact us and we will delete it.

10. Security

Connections are encrypted (HTTPS). The sign-in cookie is HttpOnly, Secure and signed, and Google sign-in tokens are verified on our server. No system is perfectly secure, but we keep the data we hold to a minimum.

11. Changes

If we change this policy, we will update the date at the top. For significant changes we will show a notice on the site.