Privacy Policy

Last updated 9 October 2026

Findversity helps students in Pakistan find and compare universities. This page explains exactly what we store, why, and how to get it deleted. It describes what the site does today — not what it might do later.

You can use Findversity without an account

Browsing universities and programmes, comparing them, and using the merit calculator need no account. If you save something while signed out, it is kept in your own browser on that device only — it is never sent to us. Clearing your browser data removes it.

Visitor statistics

We use Google Analytics to count visits: which pages are opened, how people arrived (for example from a search), the type of device, and the rough location (city or country). Google Analytics sets cookies in your browser to do this. It does not give us your name, email or account details, and we do not use it for advertising. You can block it with Google's opt-out add-on or by blocking cookies. How Google uses this data: policies.google.com/technologies/partner-sites.

What we store when you do create an account

An account exists so your work follows you between your phone and a computer. We store:

• Your email address, and your name if you give one (or the name and email Google gives us when you sign in with Google).
• Universities and programmes you save, and the status you set on each one.
• Reminders you create, including their dates and any note you add.
• Comparisons you build.
• Profile details you type into the dashboard, such as your city and your exam marks, so the merit calculator can use them.
• Documents you choose to upload, such as a result card or CNIC, which are held in a private storage area only your account can read.

We do not ask for a payment method, and we do not sell or rent any of this to anyone.

If you write to us: the contact form

The contact form on our FAQ page stores the name, email address and message you type. To help us block spam and abuse it also stores a one-way scrambled code made from your IP address (not the address itself), the type of browser you use, and the page you came from. We read your message to answer it, and we get a notice by email that a message has arrived.

Newsletter

If you subscribe, we store your email address so we can send you a short round-up of upcoming admission deadlines and new university data. To stop, ask us through the contact form and we will remove your address.

Comments on news articles

If you leave a comment, we store the name, email address and comment you type. Your email address is not shown. WordPress, the software behind our news section, also records the IP address and browser details that sent the comment, as it does for every comment. Comments are held until we have read them; they are not shown straight away.

Cookies and what we keep in your browser

We keep very little in your browser. This is what the Findversity pages themselves use.

• Google Analytics cookies: _ga and one starting with _ga_ (a random visitor ID, used only to count visits). See “Visitor statistics” above.
• Saved on your device by the site, in your browser's local storage: fv.dash.v1.* (the universities, reminders, comparisons and profile details you save while signed out, and your sign-in session once you have an account), fv.news.saved.v1 (news articles you bookmark), fvc_recent_searches (your recent searches in the search box, so you can repeat them), and fv:artifact:v1:* (a copy of our own data files, so pages load faster the next time). Browsers that belong to our own team also hold fv_internal, so our own visits are not counted as yours.
• Also on your device, in a small browser database called fv-dash: any documents you add while signed out.
• Kept only until you close the tab, in session storage: fv:list:v1 (your filters on the institutes list), fv:scroll:v1 (where you were on a page, so Back returns you there), fv.dash.guestBannerDismissed (that you closed the sign-in hint) and fv.auth.frag (a one-time sign-in or password-reset link while it is being used).

None of these is used for advertising. You can remove all of them by clearing your browser's site data.

Signing in with Google

If you choose “Continue with Google”, Google asks you to pick an account and then tells us three things: your Google account's email address, your name, and your profile picture URL. We never see your Google password, and we do not receive access to your Gmail, Drive, contacts or anything else in your Google account.

If you already had a Findversity account with that same, confirmed email address, signing in with Google joins the two into one account rather than creating a second one — your saved universities, reminders and documents stay where they are.

Google API Services and YouTube Publishing

Findversity also uses Google OAuth 2.0 and the YouTube Data API v3 for an internal publishing tool used by authorized Findversity team members to upload approved educational videos to the official Findversity YouTube channel.

For this functionality, Findversity requests only the Google OAuth permission required for video uploading: https://www.googleapis.com/auth/youtube.upload

This permission allows the Findversity publishing system to upload approved videos and associated upload information, such as the video title and privacy setting, through the YouTube Data API. Findversity uses this permission only for authorized video publishing. We do not request access to Gmail, Google Drive, Google Contacts, or unrelated Google Account information for this functionality.

How Google data is used

Google OAuth authorization information is used only to authenticate the authorized Findversity YouTube publishing connection and perform approved YouTube video uploads. The publishing system uses the YouTube Data API v3 videos.insert operation to upload videos selected and approved by an authorized Findversity team member.

Findversity does not use Google user data for advertising, profiling, credit decisions, data brokerage, or unrelated purposes. We do not sell Google user data.

How Google data and credentials are protected

Findversity applies technical and organizational safeguards to protect Google authentication information and other sensitive data. Communications with Google OAuth and Google APIs are transmitted over encrypted HTTPS/TLS connections. OAuth access tokens, refresh tokens, authorization codes, and client credentials are not exposed to public users and are not intentionally included in public application output or logs. Stored OAuth credentials are kept in protected application configuration with access restricted to authorized Findversity personnel and application processes that require them for the publishing service.

Access to the publishing environment is restricted to authorized personnel. Findversity uses access controls and credential-handling procedures designed to reduce the risk of unauthorized access, disclosure, alteration, or misuse of authentication information.

Findversity never receives or stores a user's Google password.

Sharing and disclosure

Findversity does not sell, rent, or disclose Google user data to advertisers, data brokers, universities, agents, or other unrelated third parties. Google-related information is used only as necessary to provide the authorized publishing functionality, to protect the security of the service, to comply with applicable law, or where otherwise permitted by the Google API Services User Data Policy.

Retention and deletion

OAuth credentials are retained only for as long as they are required to maintain the authorized YouTube publishing integration. When the integration is disconnected, authorization is revoked, or the credentials are no longer required, locally stored OAuth credentials are removed from active use and deleted as part of the deauthorization process.

Authorization can also be revoked through the user's Google Account permissions. Once Google authorization has been revoked, Findversity can no longer use those credentials to access the authorized Google API.

Questions or requests concerning Google-connected data may be sent to help.findversity@gmail.com.

Findversity's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes it for us

• Supabase — hosts the database, the authentication service and the private document storage for accounts. Data sits in the project we operate for Findversity.
• Google — for the sign-in step described above, when you choose it, and for the YouTube publishing tool described above.
• Google Analytics — counts page visits as described under “Visitor statistics”.
• Resend — our email provider. It delivers the emails the site sends, such as the notice we get when you use the contact form.
• Our web host — serves the pages you are reading and keeps ordinary server logs, which include IP addresses, as any web server does.

Where these companies keep servers outside Pakistan, your account data is stored on those servers.

What we do not do

• We do not sell your data, and we do not share it with universities or agents.
• We do not run advertising networks or advertising trackers on the site.
• We do not read the documents you upload beyond storing them for you.
• We do not charge students to use the site.

How long we keep things

• Account details, saved items and documents: for as long as your account exists. When the account is deleted, they are deleted.
• Contact messages, newsletter addresses and comments: we do not set an automatic expiry. We keep them until you ask us to delete them.
• What is in your browser (see the list above): on your device until you clear it, or for a session where stated.
• Google Analytics: Google keeps its own visit statistics for the period set in our analytics account. We do not hold them ourselves.

Getting your data, or getting it deleted

Use the contact form on our FAQ page, or email help.findversity@gmail.com, from the address you used with us. Say what you want: a copy of your data, your account deleted, your newsletter address removed, or a message or comment of yours deleted. Deleting an account deletes the rows and uploaded files listed above. We answer these by hand, so allow us a few working days.

Students under 18

Many of the students who use Findversity are still at school or college. We ask for as little as possible for that reason, and nothing beyond what is listed above. If you are a parent or guardian and want an account removed, email us from any address and tell us which account — we will not require proof beyond enough detail to identify it correctly.

Changes to this page

If what we store changes, this page changes with it and the “last updated” date above moves. We do not quietly widen what we collect.