Thefacebook uses your account and profile information to show students who belongs to a school network and what they chose to share.
The profile page is meant to be a college directory, not a place to hide secret information.
| Account: | Name, university email, password hash, school connection, and account status. |
|---|---|
| Session: | A session cookie in the browser and a hashed token in the database. |
| Profile: | Username, profile picture URL, basic info, contact info, interests, music, movies, websites, and bio. |
| Pictures: | Uploaded profile pictures are stored through Cloudinary and saved as a secure image URL. |
Login creates a cookie named thefacebook_session.
The cookie lets the browser prove that the same logged-in user is making later requests.
The database stores the session token hash, not the raw browser token.
A profile page can show your name, university, email, profile picture, profile fields, and when the account/profile were created or updated.
If you do not want something visible on your profile, leave that profile field empty.
Thefacebook support should not ask for your raw password, session token, or private browser cookies.
Keep those private, especially on shared school computers.