Data processing

Data controller and access

The data controller is Milana. Only Milana and the website owner can access the protected moderation queue.

Data we collect

The form accepts a display name or initials, the role “Student” or “Parent,” the subject (mathematics, physics, or both), the review text, and one private contact: email, Instagram, or Telegram. Contact details are used only for communication with the author and are never published.

Purpose and processing procedure

A new review is stored with pending status. A moderator reads the original text and can approve publication, reject the review, or unpublish a review that is already live. The author's wording is not substantively edited. Only the approved name or initials, role, subject, and review text are displayed publicly; the private contact stays in the protected moderation queue.

Retention periods

• pending — no longer than 90 days;
• rejected and unpublished — no longer than 30 days after the decision;
• approved — while the review remains published;
• backups — no longer than 30 days.

Once an approved review is unpublished, the 30-day retention period for unpublished reviews begins. A deleted record may remain in protected backups until their 30-day retention period ends.

Technical data

To protect the form from spam, the server checks a hidden field, minimum completion time, request size, and submission frequency. The raw IP address and resubmission key are not stored in the database; one-way HMAC identifiers are used instead. They are not published and are used only to protect the form and support safe resubmission.

Removal by request

An author may request that their review be unpublished and deleted by sending a direct message to @thinkaboutituz on Telegram. After a confirmed submission, the form displays a review reference number; the author should save it and include it in the request. The private contact supplied with the review can help verify the request.