Platform Architecture

How Data Flows Through ListPeers

Last updated: 31 January 2026

This diagram shows the system hierarchy and the exact data flow from the user interface to the data layer and external systems. All data access is consent-gated and scoped by privacy rules.

Request PathResponse PathConsent-Gated Data
Layer 1: Presentation
User Browser
Landing • Dashboard • Peers • Rankboard • Settings
HTTPS Request
Response
Layer 2: Application
Next.js App
UI Pages
API Routes
Auth
Secure API Call
Scoped Response
Layer 3a: Authentication
Supabase Auth
GitHub OAuth • Sessions
Layer 3b: Data
PostgreSQL DB
RLS • Triggers • RPCs
Consent CheckData Response
On-demand & One-time (Authorized)
Layer 4: External API
GGSIPU Result Systems
Official results source (authorized)
Imported Data

Key Principles

  • • Data access is consent-based and scoped.
  • • Imports are initiated only by the user.
  • • Privacy rules are enforced at the database layer.

Security Boundaries

  • • UI never directly accesses the database.
  • • API routes validate and proxy requests.
  • • External systems are contacted only with explicit authorization.