SQCSurvey QC
Draft

Privacy Policy

This draft describes only features that exist in this Survey QC website today. It is not legal advice. Replace the marked items before you publish the site on the internet.

Last updated: 21 October 2026 (draft)

You must supply: legal name of the person or business that runs this website; postal or business address (if you have one); the email that should receive privacy questions; the country or region whose law applies. Do not publish this page as final until those are filled in.

Who this policy is for

This website promotes Survey QC software, offers a public Match Pro installer download, and lets people create a website account. The Survey QC desktop installer, paid licences, and online purchases are not available on this website yet. Tutorial videos are listed but not published yet.

Who is responsible

The public site currently names “Created by Yousef Naanouh.” The Download section lists eng.yousefnaanouh@gmail.com for Match Pro activation questions. That address is already on the site. It is not automatically the privacy contact unless you say so.

Privacy contact name:
Privacy contact email:
Business / operator name:
Address (if any):

Information we collect

If you only browse public pages and do not sign in, this application does not store a visit counter or marketing profile. Your browser still sends a normal request to the web server (which may include an IP address in the host’s own logs; that is outside this application).

If you create an account, the application stores:

  • Name and email address you enter
  • A hashed password (the site cannot show your real password)
  • Whether your email has been confirmed, and when
  • Account role (regular user or admin) and status (active or disabled)
  • When the account was created
  • Last successful sign-in time
  • IP address for successful sign-ins, failed sign-in attempts, and some security events
  • Email used on a failed sign-in attempt
  • Tokens used to confirm email or reset a password (stored as hashes, with an expiry time)
  • Activity records such as account created, sign-in, failed sign-in, account disabled or restored
  • Admin audit records when an administrator disables or restores an account
  • Short security error messages (for example a blocked admin page or a wrong setup key)

On the server used for this application, outgoing account emails may also be written to a mail log file used for delivery troubleshooting. That log can contain the email address and the message text. It does not contain the account password.

Cookies

The site uses one session cookie (surveyqc_session) so it can keep you signed in while you use the site, protect forms (CSRF), and show success or error messages. It is a session cookie (it should expire when you close the browser). It is marked HttpOnly. On a live HTTPS site it should also be marked Secure.

This project does not include advertising cookies or third-party analytics scripts.

Why we use this information

  • Create and sign in to a website account
  • Confirm email and reset passwords
  • Show the learning centre to signed-in users
  • Let administrators manage accounts and review security activity
  • Reduce password guessing (failed-attempt lockout)

We do not use this website to process payments. We do not sell account lists through a feature in this project.

Who can see account information

You can see your own name, email, confirmation status, and licence line (“not issued yet”) on your account page. Administrators who sign in with an admin role can see names, emails, roles, status, registration dates, last sign-in times, IPs, activity, and audit records. They cannot see passwords.

Email

If you sign up or request a password reset, the site prepares a confirmation or reset message. On a live host, delivery depends on that host’s mail setup. This project currently uses the server’s PHP mail function; it does not include a separate marketing mailing list.

Downloads

Match Pro 2.5 can be downloaded without an account. The Survey QC installer is not offered on this website yet. Downloading Match Pro does not, by itself, create a row in the account database.

How long we keep data

You must decide how long to keep accounts, sign-in logs, mail logs, and backups, and write that period here. This code does not automatically delete old accounts.

Your choices

You can sign out, change your password, and resend an email confirmation while the account is active. If an administrator disables the account, you cannot sign in until it is restored. This website does not yet include a “delete my account” button.

Explain how someone can ask to correct or delete their account (email the privacy contact you supply above).

Children

State the minimum age you allow. This application does not currently check date of birth.

Changes

When this policy is updated, the date at the top should change. Material changes should be reviewed before you put the site on the public internet.