Privacy Policy

1. Who we are

CampusGive is a student-to-student platform for giving away items for free within university and city communities. We act as the data controller for the personal data described below. For any privacy question, use the “Contact us” button on our homepage.

2. What data we collect

• Account data: email address (university email, and an optional secondary host-university email), password hash, full name, city and region.
• Profile data: profile photo, school/campus, short bio, Erasmus status, language preference, referral code.
• Content you publish: listings, photos, pickup slots, requests (“Looking for”), community memberships, reviews.
• Interaction data: messages exchanged with other users about a pickup, bookings, reports, feedback and support messages.
• Approximate location: the city you enter and, if you allow it, your browser location to sort items by distance. Listing coordinates are stored deliberately fuzzed before being shown to other users.
• Technical data: authentication events (sign-in, password change) and minimal security logs.

3. Why we use it and on what legal basis

• Performance of a contract (Art. 6(1)(b) GDPR): creating your account, publishing listings, arranging handovers, messaging, notifications you enable.
• Legitimate interests (Art. 6(1)(f)): keeping the community safe (moderation, abuse and fraud prevention, rate limiting), improving the service, and verifying that a sign-up email belongs to a recognised university domain.
• Consent (Art. 6(1)(a)): optional email and push notifications, optional geolocation, and the consent you give on this page. You can withdraw consent at any time in your profile settings or in your browser.
• Legal obligation (Art. 6(1)(c)): responding to lawful requests.

4. What other users can see

Other signed-in students can see your first name (and last-name initial according to your setting), profile photo, school, city, bio, Erasmus badge, listings, ratings and reviews. Your email addresses, exact address, pickup codes and notification settings are never shown to other users. Exact pickup coordinates are shared only with the person whose booking you confirmed.

5. Sharing and processors

We do not sell personal data and we do not use advertising networks. We rely on service providers acting on our instructions to host the application, the database, file storage and authentication, and to deliver transactional emails and push notifications. Map tiles and address lookups are requested from third-party map providers when you use the map or address search; these providers receive the query and your IP address.

6. International transfers

Where a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision or the European Commission’s Standard Contractual Clauses.

7. Retention

Account and profile data are kept while your account exists. Listings expire or are closed and are removed on a rolling basis; messages tied to a booking are kept while the booking record exists. When you delete your account, your profile is anonymised and your personal identifiers are removed; limited records may be retained where necessary for security, dispute handling or legal obligations.

8. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent. You can download a copy of your data with the “Export data” button and delete your account from your profile page. You may also lodge a complaint with your national data protection authority.

9. Security

Access to data is restricted by row-level database policies so that each account can only read what it is entitled to. Sensitive fields such as pickup confirmation codes are readable only through controlled server-side functions. Please never reuse your university password on CampusGive.

10. Minors

CampusGive is intended for university students and is not directed at children under 16.

11. Changes

If we change this policy materially we will ask you to review and accept the new version the next time you sign in.