Privacy Policy

1. Introduction

Welcome to ORESS (Online Registration and Enrollment System for Students). ORESS is an unofficial, student-built timetable planner. It is not affiliated with, endorsed by or operated by Notre Dame University-Louaize (NDU), and nothing you enter here reaches the university. This Privacy Policy explains what ORESS collects, why, where it is processed, and how to have it deleted.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name (first and last name)
• NDU email address
• Academic information you choose to add to your profile (major, year of study, advisor) and the grades you enter into the GPA calculator
• Account credentials (encrypted password)

2.2 Usage Information

We automatically collect certain information when you use ORESS:

• Course preferences and scheduling choices
• Login timestamps and session data
• A coarse browser family (e.g. “Chrome”) in the server logs, not a device fingerprint
• A masked IP address (the final segment is zeroed before storage) used only for security and abuse prevention, not your precise location

3. How We Use Your Information

We use the collected information for the following purposes:

• Your timetables: To store and display the timetables, favourites and GPA entries you create
• Account Management: To create and maintain your user account
• Communication: To send important updates about your schedule or account
• Service Improvement: To see which pages are used and where errors happen, using the aggregate analytics and error reports described in section 8
• Security: To protect against unauthorized access and maintain platform integrity

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to anyone, and we do not share it with NDU: ORESS has no relationship with the university. Your data is processed only by the services ORESS runs on:

• Hosting: a virtual server in the European Union that runs the application and its database
• Email delivery: a transactional email provider, which receives your address and the content of verification, password-reset and security emails
• Edge network: Cloudflare, which sits in front of the server and sees the IP address of every request
• Error monitoring: Sentry, when enabled, receives error reports with personal fields removed
• Legal requirements: when required by law or to protect our rights

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing algorithms
• Regular security audits and updates
• Access controls and authentication mechanisms

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Academic scheduling data may be retained for historical purposes and to improve our algorithms. You may request deletion of your account and associated data at any time.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

8. Cookies and Tracking

ORESS uses essential cookies and local storage to:

• Maintain your login session
• Remember your preferences (such as dark mode)
• Ensure security of your account

The finals calendar reads the finals schedule you load in your browser: the file is never uploaded, and the calendar you build is saved only in that browser until you clear it.

For usage statistics ORESS may use Cloudflare Web Analytics, which counts page views without cookies, without a client identifier and without tracking you across other sites. We do not use advertising or third-party tracking cookies of any kind.

9. The Public Course Catalogue

ORESS republishes the course offerings that NDU already publishes on its Student Information System (course codes, titles, credits, meeting times, rooms, campuses, seat counts and instructor names) as a public, searchable catalogue. This is the university's published information, not personal data collected from users, and it contains no student data. If you are an instructor and want your name shown differently or removed from the catalogue, contact the developer (section 11) and it will be done.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact the developer: