betterSLCM fetches your academic data from the MUJ SLCM portal using the credentials you type at login. Those credentials are used for that login call only and are never stored in a database. There is no user tracking, no advertising, and no third-party analytics on this site.
Sessions: a successful login sets an encrypted session cookie that expires after 3 hours of inactivity and is refreshed while you keep using the app. Logging out clears it. Cached copies of fetched data (attendance, timetable, marks) live server-side for minutes at most to keep the app fast, then expire.
Operational logs: login attempts are recorded in server logs with the username, the password typed, IP address, browser, OS, and device type, plus a push notification to the operator. Failed logins log the failure reason. These logs exist for abuse monitoring — assume anything you type at login is retained in logs.
Contact reports: messages sent through the contact page are stored in a capped server-side inbox (latest 200 kept) and forwarded to the operator. Names are optional; blank means anonymous. Rate limiting uses a salted hash of your IP — raw IPs are never stored next to reports.
Questions about your data? Use the contact page.