Privacy policy
Last updated: 2026-07-31
EdMat is a study resource run within the Faculty of Physics, University of Warsaw. This page explains exactly what the service records about you, why, how long it keeps it, and what you can ask us to do about it.
We do not use a cookie banner, and that is a deliberate decision rather than an omission. EdMat runs no analytics, no advertising, and no third-party tracking of any kind. The only things stored on your own device are the ones the site cannot work without, and they are listed in full below. If we ever add something that genuinely requires your consent, we will ask you for it at that moment, in the place it applies — not through a banner that asks about everything at once.
Who is responsible
The service is operated by Ośrodek Komputerowy Wydziału Fizyki Uniwersytetu Warszawskiego (the Computer Centre of the Faculty of Physics, University of Warsaw), which administers the systems this site runs on and oversees how the data described here is handled.
EdMat is developed by students of the Faculty. If you are a student and have a question about this service, or want to exercise any of the rights below, Dziekanat Studencki (the Student Dean's Office) is your contact point and will pass your request on.
What is stored on your device
These are the only things EdMat writes to your browser. All of them are necessary for a feature you asked for, none of them are shared with anyone, and none of them are used to track you across other websites.
| What | Why |
|---|---|
| Login token | Keeps you signed in. Removed when you log out. |
| PARAGLIDE_LOCALE | Remembers whether you chose Polish or English. |
| Theme preference | Remembers light or dark mode. |
| My Set | The exercise collection you build while browsing, so it survives a page reload. Stays on your device unless you sign in and save it. |
| Recently viewed exercises | Used only to avoid handing you the same exercise twice from the random picker. Never sent to the server. |
| Interface preferences | Small things like which tab you last had open. |
What the server records
Every website receives certain information simply by being asked for a page, and EdMat keeps a record of it to keep the service working and secure — to investigate errors, and to detect abuse such as password-guessing attacks.
The legal basis for this is our legitimate interest in the security and correct operation of the service (Article 6(1)(f) GDPR; see also Recital 49, which names network and information security specifically). It is not based on consent, which is why there is nothing here for a banner to ask about.
- Your IP address
- The date and time of the request
- Which page or endpoint was requested, and whether it succeeded
- How long it took to serve
- Your browser's self-reported name and version, and the page you arrived from
- Your account, if you were signed in at the time
What the server deliberately does not record
- What you searched for. Search terms are removed before anything is written down — what you are studying is nobody else's business.
- Anything you type into a login or registration form.
- Your password, or the contents of any authentication request.
- Any identifier that would let us recognise you as a returning visitor when you are not signed in. We do not fingerprint devices, and there is an automated test in the codebase that fails if anyone tries to add one.
How long it is kept
Deletion is automatic and runs daily. It is not something a person has to remember to do.
| Data | Retention |
|---|---|
| Full IP address | 30 days, then shortened so it identifies a network rather than a household |
| The rest of the request log | 90 days, then deleted |
| Record of moderation decisions | For as long as the account exists, plus one year |
| Your account and the content you posted | Until you ask for it to be deleted |
Content you post publicly
Exercises, translations, comments, reviews, tutoring listings and profile information are visible to other users by design, under whatever display name you chose. Please treat anything you post as public. Messages you send to another user through the site are visible to that user and to moderators.
Your rights
Under the GDPR you can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, and object to our processing it on the basis of legitimate interest. Contact Dziekanat Studencki, or Ośrodek Komputerowy Wydziału Fizyki UW, to make a request. You also have the right to complain to the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych).
One limit is worth stating plainly rather than leaving you to discover it: if you have acted as a moderator, the record of the decisions you made is kept even after your account is deleted, with your name removed from it. This is because those decisions can be appealed and reviewed by others, and a decision nobody can examine cannot be challenged by the person it affected.
Who else sees it
Nobody outside the Faculty. EdMat sends no data to advertisers, analytics providers or any other third party.
Two external services are contacted in the branch of normal use, and neither receives anything about you: OpenStreetMap, when you search for an address while creating a tutoring listing (the search text is sent, your identity is not), and the map tiles shown on a listing, which are requested by your browser directly from OpenStreetMap and therefore reveal your IP address to them.
Changes to this policy
If this policy changes in substance, the date at the top will change with it. We will not quietly broaden what we collect without saying so here first.