<legal>

## privacy

privacy policy

Last updated: 2026-06-04

what this is

UTHM Forge ("we", "us", "the forge") is a student- and staff-led community platform for builders at Universiti Tun Hussein Onn Malaysia (UTHM), based in Parit Raja, Batu Pahat, Johor. This page tells you what data we collect, what we don't, and what rights you have. We try to be brief and honest.

UTHM Forge is operated as a community initiative. It is not an official product of Universiti Tun Hussein Onn Malaysia unless explicitly stated. For official UTHM services, visit uthm.edu.my.

what we collect

When you use the site, we collect the minimum needed to make it work:

  • Account data (if you register): handle, display name, email, password hash, wallet address. You control what's public.
  • Content you create: showcase entries, circle posts, job applications, bounty claims, townhall replies.
  • Application data: if you apply for a job or bounty, we forward your inputs (name, email, note, optional resume URL) to the issuer.
  • Form data: contact forms, waitlists, and the bounty-poll vote. These are stored in your browser's localStorage as drafts and posted to our backend on submit.
  • Aggregate analytics: page views, click counts, error logs. No third-party trackers. No fingerprinting.

what we don't collect

  • No third-party advertising trackers.
  • No Google Analytics, no Facebook pixel, no Hotjar, no session-replay.
  • No biometric data.
  • No location data beyond the faculty you self-select on your profile.
  • No data from users who aren't members (visitors are anonymous by default).

cookies and local storage

We use only localStorage for client-side state. That means: theme preference, RSVP state, bounty-poll votes, applied-jobs log, contact-form drafts. We do not set any document.cookie values. If your browser blocks localStorage, the site still works — you just lose some local conveniences.

third parties

  • Vercel hosts the site. They see your IP, user-agent, and the page you requested, per their privacy policy.
  • GitHub is used for our open-source projects. If you sign in with GitHub, we see your handle and email.
  • Discord powers our community. They have their own privacy policy.

We do not sell, rent, or trade any of your data with anyone.

data retention

  • Account data: until you delete your account.
  • Content: until you delete it, or until your account is deleted.
  • Application submissions: 12 months, then anonymised for the issuer's records.
  • Server logs: 30 days.

your rights

  • Access: you can ask for a copy of all data we hold on you.
  • Rectification: edit your profile any time.
  • Erasure: delete your account, and we delete your data within 30 days.
  • Portability: export your showcase entries, applications, and replies as JSON.
  • Complaint: if you think we've mishandled your data, email privacy@uthmforge.uthm.edu.my and we'll respond within 14 days. You can also escalate to the Jabatan Perlindungan Data Peribadi (JPDP) under the PDPA 2010.

children

The site is not directed at children under 13. We do not knowingly collect data from children. Members under 18 (typical for UTHM undergraduates) must have the consent of a parent or guardian to register.

changes to this policy

If we change anything material, we'll email registered users and post a notice on /changelog at least 30 days in advance. The "last updated" date at the top reflects the current version.

contact

For any privacy question: privacy@uthmforge.uthm.edu.my. For everything else: hello@uthmforge.uthm.edu.my.