In short: browsing RankingLab does not involve cookies, analytics or tracking. If you email us, we use your message only to deal with your request, and you can ask us to access or delete your data.
Who is responsible
Personal data processed through this site is controlled by RankingLab, an independent, non-commercial research project. To protect the independence of our work, the people behind the project are not named; hi@rankinglab.org is our point of contact for every privacy matter, and requests sent there reach the people responsible.
We do not rank people
RankingLab ranks institutions and programs. We do not rank, score or profile individual people, and we do not use AI or any other method to make judgments about individuals. See the Responsible AI Use Policy.
When you browse the site
- No cookies. The site sets no cookies. If you switch between light and dark themes, your choice is stored in your own browser only, and never sent to us.
- No analytics or tracking. We do not run analytics, advertising, tracking pixels or session recording.
- Server logs. Our hosting provider keeps standard server logs, such as IP address, date and time, page requested and browser type, for security and to keep the site running. These logs are kept by the provider for a limited period under its own policies.
- Fonts. The site currently loads fonts from Google Fonts. When a page loads, your browser connects to Google servers, which receive your IP address and standard request information. Google processes this under its own privacy policy.
When you contact us
We process the personal data you choose to send us, for example when you:
- Report a suspected diploma mill or accreditation mill.
- Send a review request or raise a concern.
- Apply to become an assessor.
- Send a general question.
This usually includes your name, email address, any role or organization you mention, and the content of your message and attachments.
What we use it for
| Purpose | Legal basis |
|---|---|
| Responding to questions, review requests and concerns | Legitimate interests in running accurate, accountable rankings |
| Handling reports of suspected mills, including referral to competent authorities where appropriate | Legitimate interests in protecting students and the public |
| Assessing assessor applications and managing the assessor pool | Steps taken at your request, and legitimate interests |
We do not sell personal data and do not use it for marketing.
Assessors
Assessors provide information about their qualifications, field and conflicts of interest. This is used to assign work fairly and manage conflicts. To protect their independence, assessors' identities are kept confidential and are not published. Individual assessors' scores for specific entities are never published.
People connected to ranked entities
We rank institutions, programs and organizations, not people. When we assess a professional entity, our research may include publicly available information about its founders, leaders or key staff in their professional capacity, such as their roles, education and professional experience, because the people behind an entity are part of what determines its quality. We obtain this from public sources, use it only to assess the entity, and do not publish profiles of individuals. Our lawful basis is our legitimate interest in independent research and publication on matters of public interest. If you are such a person, you can exercise the rights described below.
Confidentiality of reports
We do not publish the identity of people who report errors or suspected mills, unless they ask us to. If we refer a report to a competent authority, we share only what is necessary and, where possible, without identifying the reporter.
Sharing
We share personal data only:
- With service providers who help us run the site and email, under appropriate terms.
- With competent authorities where a report concerns a suspected mill or where the law requires it.
- With our volunteers who need it to handle your request, under confidentiality obligations.
Some of these providers may be located outside your country. Where required, we rely on appropriate safeguards for international transfers.
How long we keep data
- Correspondence: as long as needed to handle the matter, and generally no longer than two years after it is closed.
- Review request and correction records: for the life of the edition plus two years, to support audit.
- Research records about ranked entities: for the life of the edition plus two years.
- Assessor records: while the person is in the assessor pool, and for two years after they leave.
Your rights
Depending on where you live, you have rights over your personal data, for example under the EU and UK General Data Protection Regulation. These include the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data.
- Object to or ask us to restrict processing based on legitimate interests.
- Withdraw consent at any time, where we rely on consent.
- Receive your data in a portable format, where applicable.
To exercise your rights, write to hi@rankinglab.org. We respond within the time limits set by law. You also have the right to complain to your local data protection authority.
Security
We take reasonable technical and organizational measures to protect personal data, including limiting access to people who need it and using approved tools only, as set out in the Responsible AI Use Policy.
Changes to this notice
We will publish any changes on this page with a new version number and effective date.