Privacy policy

OgenSync stores the information needed to sign in, complete a student profile, generate certificate records, keep private PDF downloads, and show limited public verification metadata.

Data stored

The app stores Google account email/name, profile details entered by the user, generated certificate metadata, and private PDF files. Generated PDFs are stored in a private R2 bucket.

Public verification

Verification pages show limited certificate metadata such as certificate code, recipient name, activity title, activity category, and generation date. Roll number, email, points, and private PDF files are not public.

Authentication

Google OAuth is used for sign-in. JWT sessions are used by the app, and secrets must be configured in the Cloudflare Worker environment.