Privacy

Last updated 17 October 2026.

Papersseum is a season-long bot tournament for IIITDM Jabalpur. This page says what the site stores about you, who can see it, and how to have it removed. We don't run ads, sell data or use analytics or tracking.

Signing in

You sign in with Google, and only @iiitdmj.ac.in accounts are accepted. Google tells us your email address, your name and your profile picture's address. We use the email to check that you're from the institute and to keep you signed in. We only email you if you switch email on in your settings, and then only about your own bot: when an upload passes or fails, and after its first match. The site never shows your picture or email address.

Your name, as it is on your Google account, is shown publicly as the owner of your bot, on the leaderboard and on your bot's page. If you change the name on your Google account, the site picks up the new one the next time you sign in.

Your bot starts with a name made from the part of your email before the @ (for example 24bcs001), so your roll number is public until you rename the bot. You can rename it once a season. The old name stays reserved for your bot, so old links still lead to it. Your account also keeps a handle made the same way; the site doesn't show it, but it can be read through the site's public data interface.

What we store

• Your account: email address, the name and picture address Google sends, and when you signed up and last signed in.
• Your inbox: the notices about your bot (an upload passed or failed, its first match), when each was sent and whether you've read it, and whether you switched email on.
• Your bot: its name, any earlier name, rating and number of games.
• Your uploads: each .py file you upload, with its size, a checksum, when you uploaded it, and the result of its checks.
• Matches: each match's seed, results, rating changes and a replay file (the moves every bot made).

Who can see it

• Everyone, signed in or not: your name as your bot's owner, your handle, your bot's current and earlier names, ratings, match results and replays.
• Only you: your upload history, including why an upload was rejected, your inbox and your email setting.
• Nobody else downloads your code. It is read only by our match servers, which check it and run it in a sandbox to play matches. The organisers can read uploads when they need to investigate a bot that breaks the rules.

Replays you open yourself

On the replay page, the file you pick is read and replayed inside your browser. It is never uploaded.

Cookies

The site sets only the cookies that keep you signed in. There are no advertising or analytics cookies, so there is nothing to opt out of.

Services we use

• Google handles sign-in.
• Supabase hosts the database, sign-in sessions and the uploaded files.
• Vercel hosts the website.
• Resend sends the emails, only if you switched email on. It receives your email address and the notice.
• jsDelivr serves the Python runtime that watching a replay downloads.

Like any website host, these services see your IP address and browser details when you use the site, and may keep them in short-lived logs for security and debugging. Their own privacy policies cover that.

How long we keep it

We keep your account, bot and uploads for as long as the tournament runs, unless you ask us to delete them.

Deleting your data

Ask the organisers to delete your account. We remove your account, name, handle, bot and every file you uploaded. Past matches stay on the site so other players' ratings still make sense, but your bot's name is removed from them.

Contact

For questions or deletion requests, contact the organisers through the project's GitHub repository.