Privacy Policy

This describes, plainly, what Qoraal collects and why. Qoraal is a small, independently-run project — there is no advertising network, no third-party analytics script, and no data broker involved.

Signing in

Qoraal has no passwords. You sign in with your email address, and Qoraal emails you a 6-digit code. That email is sent through ZeptoMail (a Zoho service) — your email address is shared with ZeptoMail only to deliver that code. Once you're signed in, a session cookie (HttpOnly, expires after 14 days) keeps you logged in; it isn't used for tracking or advertising.

Your profile content

Anything you add to your profile — name, bio, experience, education, skills, projects, and writing — is stored so your public page at qoraal.com/username can be served, and is public by default, the same way a printed CV or a LinkedIn profile is public once you publish it. Don't add anything to your profile you don't want visible to anyone who visits your page.

Importing a CV

If you use the "import from CV" feature, the text of the file you upload is sent to OpenAI's API to extract structured fields (job titles, dates, etc.) into your profile form. Qoraal does not store the uploaded file itself — only the structured result you then choose to save to your profile.

Analytics

Qoraal counts views on profile and article pages so you can see how many people found your page. Counting is deduplicated by IP address for a short window so refreshing your own page repeatedly doesn't inflate the number, and your own visits to your own page are never counted. These view counts are aggregate numbers, visible only to you as the profile owner — not a visitor-level log.

When you sign up

When you first claim a username, your email, username, and country (detected from your connection, not asked directly) are recorded in a private signup log the founder uses to track growth, and trigger a one-line notification to the founder. This is operational bookkeeping for a small project, not shared onward or used for marketing.

Rate limiting & abuse prevention

To stop automated abuse (spam sign-ups, brute-forcing login codes), your IP address is temporarily counted against request limits. These counters expire automatically, typically within an hour, and aren't used for anything besides blocking abusive traffic.

Where data lives

Qoraal runs entirely on Cloudflare's infrastructure (Cloudflare Pages and Workers KV). There is no separate database vendor or analytics vendor beyond what's described above.

Deleting your data

To have your profile and account data removed, contact [email protected].

Changes

If this policy changes in a way that matters, the "last updated" date above will change and, where practical, active users will be notified.