Privacy

What we store, and who else sees it
Back to the platform

What this platform keeps about you, why it keeps it, and who else sees it. Last updated 9 September 2026.

ما تحفظه هذه المنصّة عنك، ولِمَ، ومن يراه غيرُنا. آخر تحديث: ٩ سبتمبر ٢٠٢٦.

1. Who this notice is from

This notice covers the revision platform at omandoc.com and nothing else. Where it says we, it means the people who run that platform.

For anything on this page, or to ask for a copy of your data, write to info@omandoc.com or use the suggestion box inside the platform. To delete your account you need not ask anyone — see section 7.

هذه الصفحة عن منصّة omandoc.com وحدَها. ولأيّ أمرٍ فيها، أو لطلب نسخةٍ من بياناتك، راسِلنا على info@omandoc.com أو من صندوق المقترحات داخل المنصّة. أمّا حذفُ حسابك فبيدك أنت — انظر البند السابع.

2. The material, and what you are paying for

This page is about your data. But one thing belongs here too, because it is the question people ask first:

The teaching material on this platform is not ours. It belongs to the authors who wrote it, it already circulates publicly among candidates preparing for this examination, and every question and summary names the file and the page it came from and shows you that page. We do not sell it, and we do not claim it. If any of it is yours and you would rather it were not here, write to us and it comes down.

And you do not pay for it. The whole syllabus is open before you subscribe — every summary, every topic, every source page. What a subscription buys is our own work: the questions, which are written here and checked against their pages and are neither copied nor repeated from a past paper; the mock exam under the real clock; the subject diagnostic; the study cards; and the order the summaries are put in for your Plan and your Mistakes pages. We do not sell information — we sell the work of organising it, and the experience of being examined on it. This is set out in full in the terms of use, section 3.

المادّةُ العلميّةُ ليست لنا ولا ندّعيها — هي لأصحابها، وكلُّ سؤالٍ وملخّصٍ يذكر ملفَّه وصفحتَه ويعرضها؛ ومن كانت له مادّةٌ هنا ولم يرضَ بقاءَها فليراسِلنا تُرفع. ولستَ تدفع مقابلها: المنهجُ كلُّه مفتوحٌ قبل الاشتراك. وإنّما تدفع مقابل عملِنا: الأسئلةُ المكتوبةُ هنا المحقَّقةُ على صفحاتها، والاختبارُ الكامل بزمنه، والتشخيصيُّ، وبطاقاتُ الدراسة، وترتيبُ الملخّصات في صفحتَي الخطّة والأخطاء. لا نبيع المعلومة، بل تنظيمَها وتجربةَ الامتحان بها.

3. What we store

Only what the platform needs in order to work. There is no advertising, no analytics script, and no tracking of you across other websites.

Your accountYour username, and an email address if you gave one. Your passcode is never stored — only a one-way cryptographic hash of it, with a salt unique to your account. Nobody can read your passcode back, ourselves included.
Sign-in recordsThe number of failed attempts on your username, the time of the last one, and the IP address it came from. This is what locks an account after repeated wrong passcodes, and it exists for that alone.
Your deviceThe browser identification string (user agent) of the device you last signed in from, and an internal session identifier. This is how one account stays with one person: signing in on a second device signs the first one out.
Your study workThe tests you open, the answers you give, the time you spend, and which questions you got wrong. This is the platform's whole purpose — it is what draws your plan and your mistakes page.
Your subscriptionThe dates your access starts and ends, the amount paid, the payment reference, and the payer name the payment provider returns to us.
What you write to usThe text of any suggestion you send, and the contact detail you attach to it, if you attach one.

We never receive your card number, your bank details, or any payment credential. Those go to the payment provider and never reach this platform — see section 5.

ولا نستقبل رقم بطاقتك ولا بيانات مصرفك ولا أيَّ بيانات دفع؛ فهي تذهب إلى مزوّد الدفع ولا تصل إلى هذه المنصّة أصلاً.

4. Why we store it

5. Who else sees it

Four services, each for one job, and none of them for advertising:

CloudflareHosts the platform and holds the database and the page images. The database is stored in Frankfurt, Germany.
Lemon SqueezyTakes the payment. Your card details go to them, not to us. They tell us only that an order succeeded, its reference, its amount, and the name and email on it.
ResendDelivers the one email this platform sends: the code to reset a forgotten passcode. It receives your email address for that message.
TelegramCarries operational alerts to the person running the platform — including the text of a suggestion you send and any contact detail attached to it, so that it can be read and answered.

We do not sell your data, and we do not share it with anyone beyond the four services above.

لا نبيع بياناتك ولا نشاركها مع أحدٍ سوى الخدمات الأربع أعلاه، ولكلٍّ منها عملٌ واحدٌ مذكور.

6. How long we keep it

Your account and your study work are kept for as long as your account exists, so that a lapsed subscription which is renewed finds its progress in place. Passcode reset codes expire within the hour and are deleted once used. Sign-in failure records are cleared the moment you sign in successfully.

7. Deleting your account

You can delete your account yourself, at any time. Open Account inside the platform and use Delete this account. It asks for your passcode and for the word DELETE, and then it is done at once.

What is deleted: the account itself, your study work and attempts, your sign-in records, and anything you have written to us. It cannot be undone. If you still have time left on a subscription, write to us before you delete — the contact details are in the Contact section inside the platform.

What is kept: records of payments already made, because we are required to keep them for accounting. Your name is taken off them and their link to your account is removed; what remains is the amount, the date, the reference, and which service took the payment. Never your card.

ولك أن تحذف حسابك بنفسك متى شئت، من Account داخل المنصّة. يُطلب رمزُك وكلمةُ DELETE، ثمّ يُحذف حالاً: الحسابُ وعملُه الدراسيّ وسجلُّ دخوله وما كتبتَه إلينا. ولا رجعةَ فيه. وإن بقي من اشتراكك وقتٌ فراسِلنا قبل الحذف. وتبقى قيودُ المدفوعات للمحاسبة منزوعاً منها اسمُك وارتباطُها بحسابك.

8. What else you may ask for

Write to us and you will have an answer within seven days.

9. What is stored in your own browser

The platform also keeps your answers and the question bank on your own device, so that you can study without a network. That copy is held by your browser and never leaves it. Signing out erases it from that browser, and so does the end of a subscription.

One cookie is set: md_session. It holds a signed session identifier and nothing else — no passcode and no personal detail. It is marked HttpOnly and Secure, so no script can read it and it never travels unencrypted. There are no advertising or analytics cookies.

كعكةٌ واحدةٌ فقط (md_session) تحمل معرّفَ جلسةٍ موقّعاً، لا رمزاً ولا بياناتٍ شخصية. ولا كعكاتِ إعلانٍ ولا تتبُّعٍ البتّة.

10. Children

This platform is for doctors preparing for a postgraduate medical examination. It is not intended for anyone under 18.

11. Changes to this page

If what we store or who sees it changes, this page changes with it and the date at the top moves. If the change is one that matters to you, you will be told inside the platform.

omandoc.com · Terms of use