Privacy Policy

Last updated: September 27, 2026

TR-YÖS Zone Bootcamp (bootcamp.tryoszone.com, the “Bootcamp”) is the student portal of TR-YÖS Zone, a school that prepares students for the TR-YÖS exam. This policy explains what data the Bootcamp collects, why, who can see it, and how to delete it.

1. Data we collect

When you sign in

• Sign in with Google. We request only the openid email profile scopes and receive your Google account ID, name and verified email address. The Bootcamp has no access to your mail, contacts, files or any other Google data.
• Sign in with Telegram. Your Telegram ID, name and @username, as provided by the official Telegram Login Widget.
• Username and password. Your username and name. Passwords are stored only as a salted scrypt hash; we never know the password itself.

Student data entered by the school

• Name, phone or Telegram contact, a teacher’s note.
• Exam, exam date and city, target score.
• Groups, schedule, personal deadlines, teachers’ grades and scores.

Learning activity

• Answers to practice questions (correct or not, topic, time), mock test and “Survival” results. These are used to show progress and your streak — the number of days in a row you practiced.
• Time of your last visit.

Stored only on your device

• Notes and drawings on “Solve on a sheet” pages and small preferences (such as whether a hint was shown) are kept in your browser’s localStorage and are not sent to our servers.

2. Why we use it

• To let you sign in and see your courses, schedule, scores and progress.
• To let teachers follow students’ progress and help them prepare.
• To protect the service, for example by limiting password attempts.

We do not sell data, show ads, or build advertising profiles.

3. Google user data

Data received through Google APIs (account ID, name, email) is used only to sign you in and to link your account to your student record. We do not share it with third parties other than the hosting providers listed below, and we do not use it for advertising. The Bootcamp’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Who can see your data

• You — your own data in the Bootcamp.
• School administrators and teachers — students’ data, to run the classes.
• Other students — only your name and streak: in group lists, chats and the “Survival” leaderboard.
• Service providers that run the Bootcamp: Vercel (hosting), Neon (Postgres database). Vercel Web Analytics collects anonymous, cookieless visit statistics. Fonts are loaded from Google Fonts.

We may disclose data when required by law.

5. Cookies

The Bootcamp sets one cookie, tz_session: a signed session identifier that keeps you signed in. It lasts 30 days, is not readable by scripts (httpOnly) and is sent over HTTPS only. There are no advertising or tracking cookies.

6. Retention and deletion

We keep data while you have an account or study at the school. To delete your account and all related data, or to get a copy of it, message us on Telegram at @tryos_zone. We delete data within 30 days. You can revoke Google access at any time at myaccount.google.com/permissions.

7. Security

Connections are encrypted (HTTPS), passwords are stored only as hashes, and only school administrators can open the admin panel. No service can guarantee absolute security, but we take reasonable measures to keep your data from unauthorized access.

8. Children

The Bootcamp is used by high-school students and applicants. Students under 16 should create an account with the consent of a parent or guardian. A parent may ask us to delete a child’s data at any time via @tryos_zone.

9. Changes

If this policy changes, we will update this page and the date at the top. We will announce significant changes in the Bootcamp or on Telegram.

10. Contact

For any questions about your data, message us on Telegram at @tryos_zone.