Dasar PrivasiPrivacy Policy
Untuk laman web dan bot Telegram @uis_confessions_bot · Dikemas kini 21 Okt 2026For the website and the Telegram bot @uis_confessions_bot · Updated 21 Oct 2026
1. Siapa kami / Who we are
UIS Confessions (BETA) is a student project, not an official Universiti Islam Selangor site. It consists of the website uisconfess.my, the Telegram bot @uis_confessions_bot.
2. Data yang kami kumpul / Data we collect
- Akaun Google UIS: alamat e-mel @undergrad.uis.edu.my dan ID pengguna (uid) Firebase, untuk mengesahkan anda pelajar UIS. E-mel tidak dipaparkan pada hantaran.
- Telegram: ID pengguna Telegram dan ID chat anda (untuk memautkan akaun dan menghantar mesej), serta ID mesej yang bot hantar kepada anda (supaya edit/padam boleh dikemas kini). Kami tidak menyimpan nombor telefon atau nama Telegram anda.
- Profil (pilihan): username, bio, pautan, jantina, tarikh lahir, program, avatar/banner pilihan, serta tetapan privasi bagi setiap medan.
- Kandungan: confession, komen, versi lama bagi hantaran yang diedit, dan salinan hantaran di saluran Telegram.
- Aktiviti: suka, simpan (bookmark), laporan dan sebabnya, tontonan unik (siapa telah melihat sesuatu hantaran, untuk kiraan), rakan dan permintaan rakan, kiraan papan pendahulu (contoh: bilangan hantaran yang ditatal), dan masa tindakan terakhir untuk had kadar anti-spam.
- Moderasi: hantaran yang ditanda (perkataan terlarang/maklumat peribadi), amaran dan sekatan beserta sejarahnya, keputusan semakan, log tindakan admin, dan rekod persetujuan peraturan komuniti.
- Peranti: kuki pilihan
uisc_prefsdan storan tempatan (lihat Kuki). Log teknikal pelayan untuk menyelesaikan masalah.
Your UIS Google email and Firebase uid (to verify you are a UIS student; never shown on posts). Your Telegram user ID, chat ID and the IDs of messages the bot sends you (so edits and deletions can be applied); we don't store your Telegram phone number or name. Optional profile fields: username, bio, link, gender, birthday, programme, chosen avatar/banner, and per-field privacy. Content: posts, comments, previous versions of edited posts, and bot-chat copies. Activity: likes, saves, reports and their reasons, unique views (who viewed a post, for counting), friends and friend requests, leaderboard counters, and the time of your last action for anti-spam limits. Moderation: flagged messages, warnings and bans with history, review decisions, admin action logs, and your community-rules agreement. Device: the uisc_prefs cookie and local storage, and technical server logs.
3. Tujuan / Why we use it
To verify UIS students, show and share confessions (including in the Telegram bot), deliver comments and notifications in the bot, prevent spam and abuse, run moderation, and remember your preferences. No ads and no third-party analytics.
4. Tanpa nama / Anonymity
Anonymous posts and comments don't show your identity to other users. The system keeps a private link between the post and your account so you can edit or delete it, and admins can see the author for moderation (every reveal is logged).
5. Penyimpanan / Where it's stored
Data is stored in Google Firebase (Firestore in asia-southeast1, Singapore; Firebase Authentication and Hosting are run by Google). The bot worker runs on our server and talks to Telegram. Messages on Telegram are also subject to Telegram's own privacy policy.
6. Perkongsian / Sharing
We don't sell your data. Content you post is public to UIS students. Data is shared only with the providers above (Google, Telegram) to run the service, or when required by law.
7. Tempoh simpanan / Retention
Posts are kept until you or an admin delete them. Deleting a post also deletes its comments, likes, saves, reports and Telegram copies. Moderation records (warnings, bans, admin logs, flags) are kept as long as needed for community safety. Telegram verification codes expire after 15 minutes.
8. Hak anda / Your rights
In line generally with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA), you can view and edit your profile (website: Profile → Edit; bot: /profile), clear profile fields and change visibility, delete your posts (), unlink Telegram with /logout, and request a copy or the deletion of your account and all data by emailing us (there is no automatic delete-account button yet).
9. Kuki / Cookies
uisc_prefs (SameSite=Lax, Secure, 1 tahun) menyimpan tema, susunan/penapis, bahasa, tab terakhir, identiti lalai dan sama ada notis kuki ditutup. Analitik tanpa nama: kami guna Google Analytics untuk mengira paparan halaman tanpa ID pengguna, e-mel atau username; alamat profil direkod sebagai /u/:user. Kuki analitik hanya ditetapkan selepas anda tekan OK pada notis kuki. Tiada ciri pengiklanan digunakan. Ia tidak mengandungi token atau e-mel. Jika Firebase App Check (reCAPTCHA v3) diaktifkan, Google mungkin memproses isyarat peranti untuk mengesan bot.We use necessary storage: Firebase Authentication keeps your login in browser storage, and the uisc_prefs cookie (SameSite=Lax, Secure, 1 year) stores theme, sort/filter, language, last tab, default identity and whether you closed the cookie notice. Anonymous analytics: we use Google Analytics to count page views (e.g. /feed, /leaderboard) with no user ID, email or username; profile addresses are recorded as /u/:user. Analytics cookies are only set after you press OK on the cookie notice; before that, only cookieless counts are sent. No advertising features are used. It contains no tokens or emails. If Firebase App Check (reCAPTCHA v3) is enabled, Google may process device signals to detect bots.
10. Bawah umur / Minors
This service is for enrolled UIS students. If you are under 18, please get advice from a parent or guardian before using it.
11. Perubahan / Changes
We may update this policy. Important changes will be noted in the Patch Notes.
12. Hubungi / Contact
Email: 26bt02005@undergrad.uis.edu.my