Security
How SHUUR is built, and what actually protects a class's work. Written for the person who has to sign off on it.
Last reviewed: 5 September 2026. Everything below describes the system as it runs today — not a plan.
Students never sign up
There is no student account to break into. A student opens the link, types a display name, and plays. We hold no student email, no password and no class roster.
The database is closed to browsers
Our database and file storage refuse every request that comes straight from a browser. Every read and write goes through our own server, which first checks who is asking and what they are allowed to see.
Answers cannot be read ahead
The correct answer is not in the page until that question has been answered. Scores are recalculated on our server from the stored answers, so a total sent by a browser is never trusted.
Where the data lives
Database and files sit in Google Cloud in the European Union. The AI runs on Google Vertex AI, also in the EU, and your materials are not used to train public models. The app itself is hosted in Frankfurt.
How teachers sign in
Sign-in runs on Firebase Authentication with Google, Apple, or an email and password. When you use a password, Google stores and checks it — we never see it, and it is never in our database.
How your files are uploaded
A file goes straight from your device to storage through a one-time link our server issues. That link expires in ten minutes, works for one file only, and refuses anything over 20 MB.
Limits on the public game links
Joining, answering and finishing a game are rate-limited per address — both on each server and across all of them together — so a share link that leaks cannot be hammered.
Deleting is really deleting
Deleting a game removes its questions, materials, uploaded files and results. You can delete your whole account yourself in Settings, and we will do it for you if you cannot sign in.
Connections, framing and tracking
Every connection is HTTPS, and browsers are told to refuse an unencrypted one for a year ahead. Our pages cannot be embedded in another site, and the browser is told the app needs no camera, microphone, location or payment access. There are no advertising or analytics trackers anywhere in the product.
Found a weakness? Tell us
Write to us with what you found, how to reproduce it, and what it lets someone do. We answer every message, in Uzbek, Russian or English, and we will tell you when it is fixed.
Please test only against your own account and your own games, and please do not run automated scanners or load tests against the live service — it is used by real classes during real lessons.
info@oxforder.uzThe documents
This page is how the system is built. What we collect and the rights you have are in the Privacy Policy; the agreement itself is in the Terms.