Privacy
What we collect, why, and how to get it deleted. In plain language.
WonderWhyPk is a volunteer, non-profit initiative. We are not selling anything and we do not sell data. This page explains exactly what happens to the information you type into our forms.
What we collect
Only what you type into one of the three forms on our contact page, plus — if you choose to create an account — what you put in your account.
If you create an account — your email address, a username, and anything optional you add: a display name, a short bio, a profile picture, and the list of opportunities you save. Signing in with Google also tells us the name and profile picture on your Google account. You do not need an account to use this site; the tracks, the books and the STEM Hub are open to everyone.
If you register as a student — your name, email address, age, city, school, class, what you are interested in, and optionally your WhatsApp number and how you heard about us.
If you book a session for a school — the school name, your name and designation, email, phone, city, preferred dates, student numbers and grade levels.
If you contact us as an organisation — your name, organisation, role, email, optional phone, and your message.
We do not use tracking cookies, we do not run advertising, and we do not build profiles on visitors. We use Vercel Analytics, which counts page views without cookies and without identifying individual visitors.
Why we collect it
To do the thing you asked us to do. Registration means we can send you competition alerts, roadmaps and resources. A school booking means we can contact you to arrange a date. A partnership enquiry means we can reply.
That is all. We do not use your details for anything else.
Who can see it
A small number of WonderWhyPk team members, and nobody else. We never sell, rent, trade or share your information with anyone.
Two companies process it on our behalf because they run our infrastructure: Supabase stores the database, and Resend delivers the notification email to our own inbox. Both are standard service providers and neither is permitted to use your data for their own purposes.
A third, Calendly, handles booking for one-to-one sessions. If you book one, you enter your name, email address and chosen time on Calendly’s own site rather than ours, along with any answers to the questions asked at booking. Those bookings appear in our Calendly account, and Calendly holds them too. Nothing you type there passes through this website.
Where it is stored
In a Supabase database. What you send through the three contact forms is written only by our own server, using a key that never reaches your browser, and cannot be read from the public internet at all.
Account data works slightly differently, because your browser needs to show you your own profile and saved list. When you are signed in, your browser can read and change your own rows and nothing else — that rule is enforced by the database itself, not by the website, so it holds even if someone bypasses our pages entirely. Your username, display name, bio and profile picture are public; your email address and your saved list are not.
If you are under 16
Please register with a parent or guardian’s permission. If you are a parent or guardian and you want your child’s information removed, email us and we will delete it — no explanation needed.
How long we keep it
For as long as you are getting something out of it. We review registrations older than three years and delete the ones that are no longer active.
How to get your data deleted
Email official.wonderwhypk@gmail.com from the address you registered with, and ask us to delete your data. We will do it and confirm within 30 days.
If you have an account you can do it yourself, immediately, without asking anyone: Settings → Danger zone. That permanently removes your profile, your saved list and your profile picture.
You can also ask us for a copy of everything we hold about you, or ask us to correct something that is wrong. Same address, same 30 days.
What we store in your browser
Which olympiad books you have ticked as started stays on your device and is never sent to us. Clearing your browser storage removes it.
If you have an account we also set a sign-in cookie, so you stay signed in between visits. It is not used for advertising or tracking, and signing out removes it.
Saved opportunities used to be kept on your device too. If you had a list saved that way, it is moved into your account the first time you sign in, so nothing is lost.
The Codeforces widget on the IOI track page sends the handle you type to codeforces.com to look up your public rating. We never store it.
Changes to this page
If we change how any of this works, we will update this page. If the change is significant and you have an account, we will email you about it. If you do not have an account there is no way for us to tell you, so the honest thing to say is: check back here.
Questions
Email official.wonderwhypk@gmail.com. A real person on the team reads it.