1. Who we are
KollegieSwap is a student dorm subletting platform operated in Copenhagen, Denmark. When we say “we,” “us,” or “our,” we mean KollegieSwap.
2. What data we collect
We collect only what's necessary to connect students with rooms:
- Account data: email address and password (encrypted). Your email is used for login and university verification.
- Profile data: first name, university, program, semester, profile photo, about me text, and lifestyle preferences (sleep schedule, noise level, cleanliness, cooking habits, smoking, pets, languages).
- Listing data: room photos, kollegium, room type, rent, dates, furnishing, utilities, and description.
- Usage data: applications you send, swipe history, and messages between matched users.
3. Why we collect it
Our legal basis under GDPR:
- Contract performance (Art. 6(1)(b)): to provide the service you signed up for — matching students with rooms.
- Legitimate interest (Art. 6(1)(f)): to verify university status and prevent fraud.
- Consent (Art. 6(1)(a)): you agree to our terms when creating an account.
4. Who we share it with
We never sell your data. We share data only with:
- Other users: your profile information is visible to other verified students on the platform (first name, university, lifestyle tags, about me, profile photo).
- Supabase: our database and authentication provider, hosted in the EU. They process data on our behalf under a Data Processing Agreement.
- Vercel: our hosting provider. They process requests but do not store your personal data.
5. Cookies
We use only essential session cookies to keep you logged in. We do not use tracking cookies, analytics cookies, or any third-party cookies. See our Cookie Policy for details.
6. How long we keep it
We keep your data for as long as your account is active. When you delete your account, all your personal data — profile, listings, applications, messages, swipe history, and uploaded photos — is permanently deleted. We do not retain personal data after account deletion.
7. Your rights
Under GDPR, you have the right to:
- Access your data — email us and we'll provide a copy of all data we hold about you.
- Rectify inaccurate data — edit your profile anytime.
- Delete your data — use the “Delete Account” button in your profile settings, or email us.
- Port your data — request a machine-readable copy by emailing us.
- Object to processing — contact us if you believe we're processing your data unlawfully.
- Complain — you can file a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.