Privacy Policy
This Privacy Policy explains what we collect, why we collect it, how we use it, and the choices you have. If you ever have questions, reach out — we’re real humans.
1) What we collect
We only collect what we need to run KampusList and keep it safe.
- Username, email, and basic profile details (like display name, university).
- Optional info you choose to add (photo/avatar, bio, phone).
- Verification signals (for example, whether your email domain matches a university).
- Ads you post: title, description, price, category, photos, and chosen location/university.
- Reports and moderation actions (e.g., scam/spam reports).
- Messages you send inside KampusList, including attachments if you add them.
- Basic metadata like timestamps and participants (to deliver messages).
- Approximate device information (browser type, pages visited, actions taken).
- Security logs (IP address may be stored for fraud prevention, abuse, and Terms acceptance).
2) How we use it
- Run the marketplace: create accounts, post ads, show listings, and deliver messages.
- Safety & trust: prevent fraud, detect abuse, enforce our Terms, and respond to reports.
- Improve KampusList: understand what works and fix what doesn’t (with privacy-friendly analytics).
- Communications: send essential product emails (account, security, transactional notices).
3) When we share data
We don’t sell your personal data. We share data only when needed to operate the service or comply with law.
- Service providers: hosting, storage, email delivery, analytics, and payments.
- Legal & safety: if required by law or to prevent harm, fraud, or abuse.
- Business changes: if KampusList is acquired or merged, data may transfer with protections.
4) Messaging & marketplace safety
Messages are private between participants. We may review messages only when:
- Someone reports abuse, harassment, scams, or illegal content, or
- We have strong signals of automated spam or malicious behavior.
Please don’t share sensitive info in chat (like passwords). Meet in safe public places for exchanges.
5) Payments (Stripe)
If you buy credits or paid features, payments are processed by Stripe. KampusList does not store your full card number.
- Stripe handles card info and payment confirmation.
- We store transaction references and details needed for receipts, refunds, and fraud prevention.
6) Analytics (Umami)
We use privacy-friendly analytics (like Umami) to understand product usage — for example, which pages are popular and where performance issues happen.
- We aim to avoid collecting unnecessary personal data.
- Analytics data is used to improve KampusList, not to track you across the internet.
7) Cookies
KampusList uses cookies/session storage primarily for:
- Logging you in and keeping you authenticated.
- Security (CSRF protection).
- Remembering basic preferences (where applicable).
8) Data retention
We keep data as long as needed to operate KampusList and meet legal/safety requirements. For example:
- Active listings and messages remain until deleted or archived.
- Some security logs may be kept longer for abuse prevention.
- Payment records may be retained for accounting and legal compliance.
9) Your choices & rights
- Edit your profile (name, avatar, university).
- Control what’s visible when you post (email/phone/address toggles).
- Request deletion of your account (subject to legal/safety retention needs).
- Opt out of non-essential emails where available.
10) Security
We use reasonable safeguards to protect your data, including access controls and encrypted connections (HTTPS). No system is perfect, but we take security seriously.
11) Children
KampusList is intended for users who can form legally binding agreements. If you believe a minor is using KampusList without permission, contact us.
12) Contact
Questions, concerns, or privacy requests? Contact us: