Policies & Academic Disclaimers

1. Minimal Data Collection Principle

GitCanvas adheres to a strict data-minimization approach. Because this is an educational project, we do not require user account registration, password creation, or sensitive personally identifiable information (PII).

2. Information Handled

• GitHub Public Data:If you use the “Sync from GitHub” feature, we query public endpoints (api.github.com/users/[username]) to fetch publicly available profile statistics, avatars, and repository metadata. We never ask for or store private GitHub access tokens.
• Test Checkout Information: When testing the simulated purchase flow, any entered name or email address is used strictly to render a simulated order receipt in your current session.
• Local Browser Storage: Profile draft configurations and simulated order history are stored locally in your web browser (`localStorage`). This data never leaves your device and can be cleared at any time by clearing browser cache.

3. Tracking & Cookies

GitCanvas does not employ cross-site tracking cookies, third-party advertising trackers, or fingerprinting scripts. Only local storage keys essential for application settings (theme preference and draft persistence) are utilized.

4. Academic Privacy Compliance

In compliance with Hanoi University academic standards, student test participants may freely evaluate the system knowing that no commercial profiling or marketing solicitations will occur.