Privacy Policy

We collect the following information when you use Highlander Rating:

• Google account information — when you sign in via Google OAuth, we receive your name and email address. Access is restricted to @ucr.edu email addresses only.
• Email address — stored in our database to identify your account and enforce the one-review-per-entity policy.
• Reviews and ratings — any reviews, star ratings, and tags you submit are stored and publicly displayed on the platform.
• Anonymous display names — each review is shown under a randomly generated handle (e.g., Highlander_A3F9). These handles are unique per review and cannot be used to link reviews back to a specific user by other visitors.
• Usage data — standard server logs and analytics may record pages visited, timestamps, and browser/device type.

We use the information we collect to:

• Authenticate you and maintain your session securely.
• Display your reviews publicly on the platform (under an anonymous handle).
• Enforce platform rules, such as the one-review-per-user-per-entity limit.
• Respond to contact form submissions and support requests.
• Monitor for abuse, spam, or violations of our community guidelines.
• Improve the platform based on usage patterns.

We do not use your email address for marketing emails or newsletters.

Highlander Rating displays advertisements served by Google AdSense. Google may use cookies and similar technologies to serve ads based on your prior visits to this site and other sites on the internet.

Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings. For more information on how Google uses data from sites that use its advertising services, see How Google uses information from sites or apps that use our services.

Your data is stored securely using Supabase, a cloud database provider. Supabase stores data in PostgreSQL databases hosted on AWS infrastructure. Data is encrypted at rest and in transit. Supabase's privacy practices are governed by their own Privacy Policy.

We take reasonable technical measures to protect your data, but no method of transmission over the internet is 100% secure.

We do not sell, rent, or trade your personal information to third parties.

We may share data only in the following limited circumstances:

• Service providers — Supabase (database), Google (authentication and ads), and Vercel (hosting). These providers have their own privacy policies governing data use.
• Legal requirements — if required by law, court order, or to protect the rights and safety of users or the public.

We use cookies for the following purposes:

• Authentication — session cookies managed by Supabase Auth to keep you signed in.
• Advertising — Google AdSense cookies for ad personalisation (see Section 3).

You can control or disable cookies through your browser settings. Disabling authentication cookies will prevent you from signing in.

As a user of Highlander Rating, you have the right to:

• Request access to the personal data we hold about you.
• Request deletion of your account and associated data.
• Edit or delete individual reviews you have submitted.

To exercise any of these rights, contact us at contact@highlanderrating.com.

Highlander Rating is intended for UC Riverside students (age 18+). We do not knowingly collect personal information from anyone under the age of 13. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, please contact us at:

contact@highlanderrating.com