Last updated: 31 October 2026
This notice describes how Science’s Last Exam (SLE) handles information in its contributor workspace.
Information we receive
When you register, we receive your email address and chosen username. If you sign in with Google or GitHub, we receive the basic identity information supplied by that provider, such as your account identifier, name, email address, and profile image. Social sign-in does not give SLE access to your Gmail messages, Google Drive files, or private GitHub repositories.
We also store the profile details you choose to provide, task submissions, reviewer correspondence recorded in the workspace, uploaded files, and material links. Authentication records can include device/browser information, IP address, and session timestamps. For personal API keys, we store a hash, a short identifying prefix, and creation, expiration, and last-use timestamps.
How information is used
Account information is used to authenticate you, maintain your profile and private submission history, send account verification and password-reset messages, and secure access. Submission materials are used for task review and evaluation. Basic Google or GitHub identity information is used for sign-in and account management.
Storage and service providers
SLE uses Supabase for authentication, the database, and private file storage; Resend for account emails; and Cloudflare for website delivery. Google and GitHub handle authentication when you select those sign-in methods. The website requests fonts from Google Fonts. These services process information needed to provide their respective functions.
Your submission records and uploaded files are available to you and the authorized SLE review team. Submitting a task does not automatically publish its materials or add them to a public benchmark. Any release or licensing requirements are handled separately. External material links remain subject to the access permissions you configure with their hosting provider.
Your account and choices
You can edit your profile, request an email change, connect or disconnect supported sign-in methods, sign out devices, and revoke API keys in Account settings. The website stores a sign-in session in your browser to keep you logged in and saves your selected color theme locally.
You can permanently delete your account in Account → Security. This removes your account, submissions, uploaded files, and API keys from the active SLE workspace. Service providers may retain operational logs or backups according to their own retention policies. Copies previously downloaded by others, or files you host through external links, are outside that deletion process.
Contact
For questions about your information or access to it, contact ly1988@princeton.edu or wuyc@stanford.edu.