Privacy Policy

Last updated: April 2026

We try to collect as little data as possible. Here's exactly what we do collect and why.

What we collect

• Account info: name, email (plus your .edu email if you verify one to host), password (hashed with Argon2), school
• Listing info: what you post — address, dates, photos, description, etc.
• Profile photo / social links: only if you choose to upload them
• Payment info: handled by Stripe — we never see or store your card number
• Usage data: basic page analytics (which pages were visited, country code) for debugging and product improvement. No third-party trackers, no Google Analytics

What we don't collect

• We don't track you across other sites
• We don't sell or share your data with advertisers
• We don't store your exact location — only the approximate area you list
• We don't use any third-party cookies

How your data is used

• Your listing details are shown publicly on the site (without your exact address — that stays private)
• Your name and school are shown on listings you create
• Your email is used for account-related notifications (new messages, listing alerts you've subscribed to)
• We never email you marketing — only transactional messages

Sharing

We share data with these third parties only as needed to operate the service:

• Stripe — payment processing
• Cloudflare — image hosting (your listing photos)
• AWS SES — sending transactional emails

We never sell or rent your information.

Cookies

We use a single cookie to keep you logged in (your session token). That's it.

Your rights

You can:

• Delete your account anytime from your dashboard (removes all your data)
• Request a copy of all data we have on you by emailing us
• Update your information at any time in settings

Security

Passwords are hashed with Argon2. All connections use HTTPS. We don't store any payment info — that's all on Stripe's side.

Contact

Questions about your data? Email [email protected].