Privacy notice

Who we are

whatsmycourse, Kuala Lumpur, Malaysia. Contact us through the contact page for anything about your data.

What we collect

Before launch, only an email address: yours if you are 18 or over, or a parent or guardian's if you are under 18. We never collect anything about a child.

To stop abuse we keep a scrambled (salted hash) form of your connection's IP address for 24 hours. We never store the address itself.

Why

To send one confirmation email and one reminder when we open on 18 December 2026.

Consent

Nothing is kept until the email owner confirms. Under-18s cannot sign up for themselves: we ask their parent or guardian (PDP Regulations 2013, reg 3(3)). Unconfirmed sign-ups are deleted after 7 days. We keep a record of each consent (when, which notice version, and how it was given).

Your rights

You can access, correct or withdraw at any time, from the link in any email or by contacting us. We will reply within 21 days.

Analytics

We use Google Analytics to count visits and see which pages are used. It sets cookies on your device, and Google processes your connection details to do this.

We send page addresses without the private codes in our email links, and Google's advertising features are turned off. You can block it in your browser's cookie settings or with Google's opt-out add-on.

Who we share with

Our hosting and email providers, under contract, and Google for visit statistics only (see Analytics). No universities, no advertisers. Sign-up data is stored with Supabase.