Privacy Policy

Last updated: July 26, 2026

1. Introduction

Welcome to MUN-Key ("we", "us", "our"). We are committed to protecting your personal data and ensuring transparency in how our platform operates. This Privacy Policy explains how we handle your information when you use MUN-Key to host or participate in Model United Nations conferences.

2. Information We Collect

We practice strict data minimization and only collect the information necessary to provide our services:

• Account Profile Data: When you sign in via Google OAuth, we receive basic account details: your full name, email address, and profile picture URL. We do not receive or store your Google password.
• Google Drive Data: We request the limited drive.file scope via the Google Picker API. This allows you to explicitly select specific documents from your Google Drive. We only access the exact files you choose to import.

3. How We Use Your Information

We use your information exclusively to operate and deliver the MUN-Key service, including verifying your identity during sign-in and maintaining committee roll-call lists.

When you select a document via the Google Picker API, we use the drive.file scope to programmatically update its sharing permissions (e.g., granting "view" or "edit" access to conference participants) to facilitate live debate. We do not read, scan, or permanently store the contents of your external documents. We do not sell, rent, or trade your personal data to third parties, advertisers, or data brokers under any circumstances.

3.1 Data Visibility Within Sessions

To facilitate live collaboration and conference management, your basic profile information is visible to other users within the specific sessions you join:

• Chair Visibility: The designated Chair or Administrator of your session can view your Name and Email address via the session logs, QuickShare menus, and moderation tools (e.g., blocking delegates).
• Delegate Visibility: Other delegates in your active session can view your Name and Email address exclusively within the QuickShare interface to allow them to accurately grant document edit permissions.

Your email address is never broadcast publicly outside of the specific conference sessions you actively join.

4. Google API Limited Use Disclosure

MUN-Key's use and transfer of information received from Google APIs to any other app will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Security & Storage

We enforce industry-standard security measures, including server-side XSS sanitization, encrypted database storage (at rest), and secure HTTPS connections. While we implement robust technical safeguards, no internet transmission is completely immune to risks, and we cannot guarantee absolute security.

6. Cookies, Local Storage & Analytics

MUN-Key uses secure, HTTP-only cookies strictly for essential session management and authentication purposes. We also utilize standard browser storage mechanisms (including HTML5 LocalStorage and IndexedDB) to cache live conference data, timer states, and user preferences locally on your device to ensure a seamless, real-time experience. These essential technologies operate automatically to provide the core service.

Analytics: With your explicit consent, we utilize Google Analytics (GA4) to understand how users interact with our platform and improve performance. This service uses third-party cookies to collect anonymized usage data. Google Analytics scripts will only run if you actively opt-in via our cookie consent banner. You can withdraw your consent at any time.

7. Children's Privacy (Under 13)

Our platform is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13 years of age. If we become aware that we have collected such data, we will take steps to delete it immediately.

8. Data Retention & Account Deletion

We retain your profile data only as long as your account remains active. You may request the complete deletion of your account and associated session records at any time by emailing us at legal@mun-key.com. Requests will be processed within 30 days.

9. Contact Us

For any privacy inquiries or data rights requests, please email legal@mun-key.com.