Privacy notice

Last updated 25 September 2026

Data we use

We use your university email, university, session identifiers, listing and offer details, order status, support reports and moderation records. Ticket PDFs are stored privately and delivered only to the buyer after payment. Stripe processes payment, identity and payout information under its own privacy terms.

Why and how long

We process data to provide the marketplace, prevent fraud, resolve disputes and meet legal duties. Verification codes expire after 10 minutes; sessions after 30 days. Define and publish concrete retention periods for tickets, orders and support records before launch.

Your choices

You may request access, correction or deletion where applicable. Some transaction records may need to be retained for legal or fraud-prevention reasons. Before launch, add the operator identity, privacy contact, lawful-basis details, processor list and ICO information after UK privacy review.