Privacy Policy

DormDrop is a non-commercial, student-initiated pilot platform operated by Joel Kwasi Asare-Apawu (natural person), Prague, Czech Republic.

The platform currently functions as a noticeboard-style exchange tool for students living at Kolej Vetrnk and Kolej Hvezda, Charles University, Prague. It allows students to list items they wish to pass on and to browse what others have listed, with a view to direct peer-to-peer exchange.

Contact: hello@dormdrop.cz

We collect only the data necessary to enable students to list items and connect with each other.

• Name — your display name on the platform
• University email address — used to verify you are a Charles University student
• Dorm affiliation — which dormitory you live in, used to scope listings locally
• Password — stored in hashed form via Supabase Auth; we never see your plain-text password

• Item name, description, photos, user-set price, and category
• This data is visible to other signed-in users

• Pages visited, listings viewed, and search terms
• Collected only if you accept analytics cookies via the cookie banner
• Used in aggregated, anonymised form to improve the platform

• Phone number or email you choose to display within a listing
• Visible only to signed-in, verified users
• You control whether to include this in any listing

We process personal data in order to:

• Provide a listing and communication interface that allows students to find and exchange items directly with each other
• Verify that users are Charles University students living in participating dormitories
• Enable account-related and listing-related notifications
• Improve the usability of the platform based on aggregated, anonymised usage patterns (analytics, with consent only)

We process personal data on the following legal bases under GDPR Article 6:

• Legitimate interest — to operate a safe, limited-scope student platform and prevent misuse (Art. 6(1)(f))
• User request / pre-contractual necessity — where data is processed at the user's own initiative, such as creating an account or submitting a listing (Art. 6(1)(b))
• Consent — for analytics cookies and product analytics, given via the cookie banner (Art. 6(1)(a))

You may withdraw consent for analytics at any time via the cookie banner or by clearing your browser's local storage. Withdrawal does not affect the lawfulness of processing before withdrawal.

We use PostHog analytics to understand how users interact with the platform and to improve usability. Analytics are only activated after you provide consent via the cookie banner on your first visit.

• Essential cookies — always active and required for login sessions and basic site functionality. These cannot be disabled.
• Analytics cookies (PostHog) — activated only after you accept via the cookie banner. Used to understand platform usage in aggregated form.
• Advertising cookies — we do not use advertising or tracking cookies of any kind.

Analytics data is stored on PostHog's EU servers. You can withdraw consent at any time via the cookie banner or by clearing your browser's local storage.

We do not sell personal data. Data is shared only with the service providers strictly necessary to operate the platform.

All processors comply with GDPR requirements. We do not share personal data with third parties beyond those listed above.

Under GDPR, you have the following rights in relation to your personal data:

To exercise any of the above rights, contact us at hello@dormdrop.cz. Requests are handled within 30 days. There is no charge for submitting a request.

Account data is retained while your account remains active. We do not retain data beyond what is necessary for the operation of the platform.

• Listings remain visible until deleted by you or removed by a moderator
• Analytics data is retained by PostHog per their standard retention policy (EU cloud)
• You may delete your account at any time from your profile settings, which removes your personal data and all your listings

If you require manual deletion of your data, contact hello@dormdrop.cz and we will process your request within 30 days.

This policy may be updated as the pilot evolves or if DormDrop becomes formally registered as a business entity (e.g. OSVC or s.r.o.). The operator details, legal basis language, and pilot-specific framing will be updated accordingly at that point.

Significant changes will be communicated to registered users by email. The "last updated" date at the top of this page reflects the current version. Continued use of the platform after a change constitutes acceptance of the updated policy.