Privacy

Privacy Policy

Last updated 7 July 2026

This policy explains what data MRISim ("we", "the site") collects, why, and your choices. The free simulator, protocol planner, lessons and quiz work with no account and no personal data. Personal data is only involved if you create an account (or, if you ever purchase the course, complete a payment).

What we collect

• Account email. If you sign in (with Google or a one-time email link), we store your email address and a user id to identify your account and course access.
• Learning progress. Which lessons you've read, quiz scores and mock-exam results are stored in your browser (localStorage). If you are enrolled in a class, activity you choose to record may be stored with your account.
• Purchase records. The guided course is currently free to signed-in users. If you do purchase the course, our payment provider processes the payment and we receive a confirmation and a reference id to grant your access. We never see or store your card details.

We do not run advertising trackers, and we do not sell personal data.

Service providers

We rely on a small number of processors, each with their own privacy terms:

• Supabase — accounts, authentication and course data storage.
• Stripe — payment processing if you purchase the course. Card data is handled entirely by Stripe.
• Google — optional one-click sign-in (OAuth). Google shares your email and basic profile with us only when you choose to sign in with Google.
• GitHub Pages — static website hosting.
• jsDelivr — a public CDN that serves the in-browser physics runtime.

Cookies and local storage

We do not use advertising cookies. The site uses browser localStorage to keep your learning progress and, when signed in, your authentication session. Clearing your browser storage removes this local data.

Your rights

Depending on where you live (including under the GDPR and US state privacy laws), you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct data that is inaccurate;
• delete your data ("right to erasure");
• object to or restrict certain processing;
• data portability, meaning receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these, or to have your account and data deleted, email erolakkoc8@gmail.com. We respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

International transfers

Our service providers (including Supabase and Stripe) may process data on servers in the United States and other countries. Where required, such transfers rely on appropriate safeguards, such as standard contractual clauses.

California residents

We do not sell or share your personal information, and we will not discriminate against you for exercising your privacy rights. Under the CCPA/CPRA, California residents may request the categories and specific pieces of personal information we hold, and request its deletion, by emailing the address above.

Data retention and security

We keep account and purchase data for as long as your account is active or as needed to provide the course and meet legal obligations, then delete or anonymise it. Data is transmitted over HTTPS and access is protected by row-level security on our database.

Children

MRISim is intended for a professional and higher-education audience and is not directed to children under 13 (or 16 where applicable). We do not knowingly collect data from children.

Changes

We may update this policy; the "last updated" date above will change. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy? Email erolakkoc8@gmail.com.