Privacy policy

Last updated: 3 October 2026

The short version

Browsing Prospectus requires no account and we collect no personal information from visitors. We use Google Analytics to count visits and see which schools are viewed, with your consent where the law asks for it, and without cookies if you decline. Personal data enters the picture only if you create an account to manage a school listing, subscribe, or contact us.

What we collect

• Visitors: nothing personal. Usage statistics from Google Analytics (pages viewed, the school a page is about, the country the visit came from, the device), which we report to schools only in aggregate: a school sees how many people viewed its listing and from which countries, never who. See the cookie policy.
• School accounts: your name, email address, password (stored as a hash), and the school affiliation you claim.
• Subscriptions: billing is handled by Stripe; we store your Stripe customer reference and subscription status, never card details.
• Correspondence: emails you send us, including listing-error reports.
• Bulletin subscribers: your email address, only after you confirm it (double opt-in). Every email carries an unsubscribe link, and unsubscribing stops sends immediately.

Processors we use

Cloudflare (hosting and bot protection), Google (Google Analytics and Search Console), Neon (database), Stripe (payments), Resend (transactional email), CARTO (the map tiles on city and school pages). Each processes data only to provide its service to us.

Pictures in The Bulletin are shown straight from the news source each story cites, so your browser fetches them from wherever that source keeps its images (the publisher or a service it uses). That host sees your IP address, as any website does, and may set its own cookies; we don't tell it which page you came from.

Your rights

You can request a copy of your data or ask us to delete your account and associated personal data at any time by emailing hello@prospectus.ac. Where data-protection law applies to you (including the GDPR and Malaysia's PDPA), we honour access, correction and deletion rights it provides.

Contact

Privacy questions: hello@prospectus.ac.