Sararia Certificates Privacy policy
Last updated
This policy explains what data Sararia Certificates handles and where it goes. In short: for participant responses, the event organizer controls the data and Sararia Certificates processes it on their behalf; nothing is sold or used for ads.
Organizer accounts
Organizers sign in with Google through Neon Auth. Sararia Certificates stores your name, email address, profile photo, and a session cookie that keeps you signed in. Participants do not need an account.
Forms, responses, and certificates
Form questions, participant responses (name, email address, and any other answers requested by the form), and certificate numbers and issue timestamps are stored in a PostgreSQL database hosted by Neon. Certificate background images uploaded by the organizer are stored in private object storage (Neon Object Storage or Cloudflare R2).
To prevent automated spam and enforce form limits, submissions are checked with Cloudflare Turnstile and rate-limited using a hashed IP address (never the raw IP address).
Who can see the data
Participant responses and email addresses are visible only to the organizer of that form. The public verification page at /v/<number> shows only the recipient's name, event title, event date, organizer name, and certificate number. Participant email addresses are never shown publicly.
Email delivery
When a certificate is issued, Sararia Certificates sends the PDF download and verification link to the participant's email address through Gmail SMTP or Resend.
What Sararia Certificates does not do
- No ads, no selling or sharing of data.
Deleting your data
An organizer can delete any form together with all of its responses and issued certificates from their dashboard. Participants who want their entry corrected or removed should contact the event organizer, or write to the address on the contact page. To delete an organizer account, write to the address on the contact page.
Changes and contact
If this policy changes, the date at the top of this page will be updated. Questions can be sent to the address on the contact page.