Privacy policy

Last updated: 10 June 2026

1. General information

EduStats (referred to below as the “Platform” or “we”) is an open platform where students can evaluate higher education institutions and educators in Uzbekistan.

This Privacy Policy explains how data is collected, stored, processed and protected when you use the platform.

2. How the platform works

  • Telegram bot (@edustatsuzbot) — write reviews and vote on them
  • Website (edustats.uz) — explore public statistics, rankings and reviews
  • Admin panel — management access for authorised administrators only

3. Data we collect

3.1. Through Telegram

  • Telegram user ID (as an internal system identifier)
  • First and last name
  • Username
  • Phone number (Uzbekistan +998 numbers only)
  • Language settings

3.2. Votes and reviews

  • Votes on reviews (upvotes/downvotes)
  • Review text (written comments)
  • Review type — positive or negative
  • Vote and review timestamps
  • Votes from surveys held before June 2026 (archived)

3.3. Data collected automatically on the website

  • IP address (for security, rate limiting and abuse prevention)
  • Browser type (User-Agent)
  • Visit times

4. Reviews and anonymity guarantees

Anonymous mode (default). The user's first name, last name and Telegram account details are not shown to other users. Only “Anonymous user” is displayed on the website. The Telegram account link, username and ID are never disclosed.

Public mode (optional). The user voluntarily agrees to display only their first and last name. Their Telegram username, ID, phone number and other account details are never disclosed.

Important: Neither mode gives other users a way to contact the author's Telegram account directly.

5. How we use data

  • Providing the platform’s core services
  • Improving the user experience and fixing errors
  • Maintaining security — preventing spam, bot attacks and duplicate votes
  • Identifying real users through CAPTCHA
  • Moderation is limited to the specific prohibitions in section 6 of the Terms of Use: personal abuse, threats, doxxing, defamation and spam. Critical opinions are not grounds for moderation.
  • Anonymous, aggregated statistical analysis

6. Data storage and protection

  • SSL/TLS encryption — all data is transmitted over HTTPS
  • HMAC-SHA256 authentication — cryptographically signed internal API requests
  • IP restriction — admin access restricted to approved IP addresses
  • Rate limiting — automatically blocking excessive requests
  • Content Security Policy — protection against XSS and other attacks
  • HSTS — enforcing HTTPS in browsers
  • HTTPOnly cookie — protecting session cookies from JavaScript access

7. Sharing data with third parties

We do not sell, rent or exchange your personal data with third parties.

Data may be disclosed in the following exceptional circumstances:

  • By court order in accordance with the laws of the Republic of Uzbekistan
  • With the user’s written consent
  • When necessary to establish a crime or offence

8. User rights

  • Right of access — ask what information has been collected about you
  • Right to rectification — request corrections to inaccurate data
  • Right to erasure — request complete deletion of personal data
  • Right to restrict processing — request restrictions on data processing
  • Right to object — object to the use of data for specific purposes
  • Right to data portability — receive your data in a structured format

To exercise your rights, contact @edustatsuzbot or email admin@jaysonkhan.com.

9. Cookies and sessions

  • Session cookie — for user authentication
  • CSRF token — to protect forms
  • edustats_language — remembers your chosen interface language for 1 year
  • tov-theme — light/dark theme preference (localStorage)

The platform does not use advertising or tracking cookies.

10. Analytics services

We may use Google Analytics and/or Yandex Metrica to improve the user experience. These services collect aggregated statistics that do not identify individual users.

Some pages may display advertising from our partner UzExam (uzexam.uz). Impressions are measured without cookies using a pseudonymous identifier that changes daily. Personally identifying data is neither transmitted nor stored.

11. Age restrictions

The platform is not intended for anyone under 14.

12. Changes to this policy

This privacy policy may be updated at any time. Significant changes will be announced on the website and/or through the bot.

13. Contact us

Problem or suggestion