Privacy Policy

Last updated: 12 October 2026

Passalong is an independent, student-run platform that connects senior university students who offer tutoring with newer students who need help. It is not an official service of any university. This page explains what personal information we collect, why, who can see it, and what choices you have.

What we collect

Everyone with an account:

• Your first and last name and your email address.
• Your password, which we never see.
• Which tutors you contacted through the site, and when. Reviews you write: your name, star rating and optional comment.

Tutors, when applying:

• Your faculty, major, year, the courses you can tutor, your price per session and your bio.
• Your phone / WhatsApp number.
• Your GPA.
• Your transcript file, which shows your GPA and your university student ID.
• Optionally, a profile picture.
• Your listing dates and payment status (for example, “listed until 3 November”).

Automatically: to keep you logged in we use cookies, and our bot check (see below) looks at basic browser and connection details to tell people from automated programs.

Who can see what

• Your transcript and GPA can be seen only by you and the site administrators, who use them to check your application. They are never shown to other students.
• Your listing (name, photo, faculty, major, year, courses, price, bio, reviews and average rating) can be seen by users of the site while your listing is active.
• Reviews show the reviewer’s name, rating and comment on the tutor’s profile.
• Administrators can see account and application details so they can run the site.

How we use your information

To create and protect accounts, to review and approve tutor applications, to let students find and contact tutors, to show reviews, to keep track of listing fees, to send emails about your account (such as confirming your email address or resetting your password), and to prevent abuse. We do not sell your information and we do not show advertising.

Services that help us run the site

We share information only with the providers needed to operate the platform:

• Supabase stores our accounts, database and uploaded files. Our data is hosted in Frankfurt, Germany.
• Cloudflare Turnstile runs the bot check on log in, sign up and password reset.
• Our website hosting provider serves the site to your browser.
• An email service sends account emails.

Listing fees are arranged directly between tutors and us, not through the website, so the site never handles payment details. We only record until when your listing is paid.

We may also share information if the law requires it, or to protect the safety of our users.

Cookies

We use only the cookies needed to keep you logged in. We do not use advertising or tracking cookies.

How long we keep it

• Your account details stay until you ask us to delete your account.
• Your transcript is kept while your application is under review and while your listing is active. When an administrator removes your listing, your transcript and photo are deleted with it. You can also ask us at any time to delete your transcript (for example after a rejected application).
• If your account is deleted, your listing, contact records and reviews are deleted with it.

Your choices

• Tutors can edit their price, courses, bio, year, phone number and photo at any time from their tutor card.
• You can delete any review you wrote.
• You can ask us to show you the information we hold about you, to correct it (including your name, faculty, major or GPA), or to delete your account and data, by contacting us (see below).

Security

Transcripts are stored privately and can be opened only by you and the administrators, using short-lived links. Access to the database is restricted by rules that limit each person to the information they are allowed to see. No online service can be made perfectly secure, so please use a strong password you don’t use elsewhere.

Changes

We may update this policy as the platform develops. When we make important changes we will update the date at the top of this page.

Contact

Questions or requests about your information? Reach us through the Contact page. You can also read our Terms of Service.