Privacy Policy

Last updated: September 14, 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Student4Me
Email: contact@student4.me

2. What data we process

We only process personal data that is necessary to operate the website and provide its features.

Depending on how you use the website, this may include:

  • account information such as your email address, name, profile information and authentication information;
  • information received through Google when you use Google to sign in;
  • listings and other content you create or upload;
  • images and other files you upload;
  • your student email address, if you choose to provide or use one;
  • messages and other communications you send to other users;
  • information about orders or transactions created through the website;
  • technical information required to operate and secure the website, such as IP addresses, timestamps, browser/device information and server logs.

We do not currently process payments between users. Any payment arrangement between users is made outside of our platform.

3. How we use your data

We use personal data to:

  • create and manage your account;
  • authenticate you and keep your account secure;
  • provide listings, messaging, ordering and other website functionality;
  • display content you choose to make available to other users;
  • allow users to communicate with each other;
  • prevent abuse, fraud and unauthorized access;
  • maintain, secure and troubleshoot the website;
  • comply with legal obligations.

We do not sell your personal data.

Depending on the circumstances, we process your personal data on the following legal bases under Article 6 GDPR:

  • Performance of a contract (Art. 6(1)(b) GDPR): where processing is necessary to provide the website and its features to you.
  • Legitimate interests (Art. 6(1)(f) GDPR): for security, fraud prevention, abuse prevention, technical operation and improvement of the service.
  • Legal obligations (Art. 6(1)(c) GDPR): where we are legally required to retain or disclose information.
  • Consent (Art. 6(1)(a) GDPR): where we specifically ask for your consent for a particular processing activity.

5. Authentication and Google Sign-In

We use Auth0 to provide account authentication.

You may sign in using your Google account. When you do so, Google provides information required for authentication, such as your email address and basic profile information, depending on the permissions granted and your Google account settings.

Auth0 processes authentication and account information on our behalf. Auth0 states that the data stored in an end-user profile depends on the authentication connection and the information provided by the identity provider.

You can learn more about how Google processes personal data in Google's own privacy documentation and about Auth0's data processing in its privacy documentation.

6. User-generated content

When you create a listing, upload an image, provide a student email address, send a message or otherwise submit content to the website, that information is processed so that the corresponding feature can function.

Some information is intentionally visible to other users. For example, information contained in a listing may be visible to other users of the website.

Messages may be accessible to the users participating in the conversation and may be processed by us as necessary to operate, secure and maintain the messaging system.

You should not upload or share personal information that you do not want other users to see.

7. Hosting and technical infrastructure

Our website and related infrastructure use services provided by Cloudflare.

Cloudflare may process technical information associated with requests to our website, including IP addresses, traffic and routing information, and other metadata required to provide security, performance and reliability services. Cloudflare describes this processing as including processing of end-user traffic and metadata on behalf of its customers.

We may also use other technical service providers where necessary to operate the website. Such providers only receive data that is necessary for the services they provide.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

Account data and user-generated content are generally retained while your account or the corresponding content exists.

When you delete your account, we will delete or anonymize personal data associated with your account where possible, unless we are required or permitted by law to retain it.

Some technical logs may be retained for a limited period for security, troubleshooting and legal purposes.

9. Sharing of personal data

We do not sell or rent personal data.

Personal data may be processed by service providers that help us operate the website, such as:

  • Auth0 for authentication;
  • Google, when you use Google Sign-In;
  • Cloudflare for hosting, security and network services;
  • other infrastructure providers used by the website where technically necessary.

We may also disclose information where required by law or where necessary to protect our rights, users or the security of the service.

10. International data transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we rely on an applicable legal mechanism under the GDPR, such as an adequacy decision or appropriate safeguards such as Standard Contractual Clauses where applicable.

11. Your rights

Under the GDPR, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing;
  • request data portability;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a data protection supervisory authority.

To exercise your rights, contact us at contact@student4.me.

12. Security

We use appropriate technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse or alteration.

However, no internet service can guarantee absolute security.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the website, our processing activities or applicable legal requirements.

The current version will always be published on this page.

14. Contact

If you have questions about this Privacy Policy or how we process personal data, contact:

Student4Me
Email: contact@student4.me