Privacy notice

Last updated 4 Nov 2026. This notice explains how OptiSim processes personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). It is a draft for legal review.

What we collect

• Account data: name, email, institution, password hash (never the password), role, plan, two-factor settings.
• Experiment data: the problems, parameters and results you create.
• Security and usage logs: sign-ins, important actions, IP address, approximate location derived from the IP, device, operating system and browser.
• Website visits: page, referrer, approximate location, device, time on page and buttons clicked, linked to a random per-visit identifier (no tracking cookie).

Why

To provide the service, keep accounts secure (fraud and abuse detection, audit), answer support requests and improve OptiSim. We do not sell personal data or use it for advertising.

Where it is stored

Database in Singapore (Neon PostgreSQL), files in Cloudflare R2, computation on our server in Malaysia. Email is sent through our SMTP provider.

Retention

Security logs are kept for 365 days. Account and experiment data are kept while your account is active and deleted on request.

Your rights

You may ask to access, correct or delete your personal data, or withdraw consent, by emailing committee@alaganu.com.

Cookies

Only essential cookies: a sign-in session cookie and, if you choose “Trust this device”, a device cookie for 30 days.