TartanOne Privacy Policy

Last updated: June 2026

TartanOne is a student-built, open-source platform for Carnegie Mellon University Africa students in Kigali, Rwanda. This page explains what information TartanOne collects, how it's used, and the choices you have.

What information we collect

When you sign in: TartanOne uses Google Sign-In, restricted to `@andrew.cmu.edu` addresses. When you sign in for the first time, we store:

• Your name
• Your email address
• Your profile photo (if you have one set on your Google account)

We never see or store your Google password.

Content you create: Anything you post on TartanOne — course reviews, roadmap comments, event submissions, map pin suggestions, bus arrival confirmations, roadmap votes — is stored and associated with your account.

Automatically collected: Basic technical information needed to operate the platform, such as error logs (via Sentry) and anonymous usage analytics (via Vercel Analytics). These help us fix bugs and understand which features are useful — they do not identify you personally beyond what's needed to debug an error you experienced.

How your information is used

• To identify you within the platform (e.g., showing your name on a roadmap you authored)
• To let moderators review and act on flagged content
• To compute aggregate statistics (e.g., course review averages) — these are anonymous summaries, not tied to your identity
• To operate and improve the platform (bug fixing, usage trends)

Who can see your information

• Your name and profile photo are visible to other signed-in TartanOne users wherever your contributions appear (reviews, comments, roadmaps, events you submit).
• Course reviews are anonymous in display — your name is not shown alongside your review, but moderators can see who submitted a review if it's flagged.
• Moderators (fellow students with moderation permissions) can see flagged content, who flagged it, and the reason given.
• System administrators (typically the platform's current maintainers) have full access to the database for the purpose of running and maintaining the platform.

We do not sell, rent, or share your information with advertisers or other third parties. TartanOne has no ads and no external data-sharing partnerships.

Where your information is stored

TartanOne's data is stored using Supabase, a database and authentication provider. Error tracking uses Sentry. Both are standard infrastructure providers used by many applications; neither has any independent right to use your data beyond providing their service to TartanOne.

Your choices

Reviewing your content: You can see your own course reviews directly on the relevant course page, including if a review is under moderator review or has been removed.

Account deletion: If you'd like your account and associated personal data removed, contact the current TartanOne maintainers at support@tartanone.com. We will deactivate your account and remove personally identifying information. Note that some content (e.g., a course review's text) may be retained in anonymized form if removing it entirely would significantly affect other students' ability to rely on aggregate course data — but it will no longer be linked to your identity.

Questions: If you have questions about this policy or how your data is handled, email support@tartanone.com.

Changes to this policy

As TartanOne is maintained by student volunteers and evolves each academic year, this policy may be updated. The "Last updated" date at the top will reflect any changes. Significant changes will be announced on the platform.

TartanOne — Carnegie Mellon University Africa · Kigali, Rwanda · Open Source (MIT License) github.com/tartanone