Privacy Policy

1. Who this policy applies to

This policy applies to everyone who visits or creates an account on offercheck.uk. Our service is intended for students aged 13 and over. We do not knowingly collect personal data from children under 13.

2. What data we collect

We collect the following personal data when you register and use OfferCheck:

• Name (first and/or last name)
• Email address
• Predicted or actual A-level grades
• University and course choices you enter into the tool

We also collect limited technical data automatically:

• Pages visited and approximate usage patterns (via Vercel Analytics — this is cookieless and does not track you across other websites)
• Device type and browser (used only in aggregate, never linked to your identity)

We do not collect payment information, precise location data, or any sensitive categories of personal data.

3. Why we collect it and our legal basis

4. How long we keep your data

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal reasons. Anonymised and aggregated data may be retained indefinitely to improve our offer prediction models.

5. Who we share your data with

We do not sell or rent your personal data. We share data only with the following service providers:

• Supabase (database and authentication): Your account data and entered grades are stored on Supabase's infrastructure, which runs on Amazon Web Services. Supabase is GDPR-compliant. Data may be stored in the European Economic Area or the United States. Where data is transferred outside the UK, appropriate safeguards are in place under UK GDPR.
• Vercel (hosting and analytics): OfferCheck is hosted on Vercel. Vercel Analytics collects anonymous, cookieless usage data. No personal data is sent to Vercel Analytics.
• OpenAI (AI analysis): The grades, course choices, and university names you enter are sent to OpenAI's API (model: GPT-4o-mini) to generate your offer prediction and answer follow-up questions. OpenAI processes this data as a data processor on our behalf. Data is processed in the United States. See OpenAI's privacy policy for details.

We do not use advertising networks, social media tracking pixels, or data brokers.

6. Cookies

OfferCheck does not use advertising or tracking cookies. Vercel Analytics is cookieless and does not set cookies on your device. We may use strictly necessary cookies to keep you logged in. These are essential for the service to function and do not require your consent under UK GDPR.

7. Your rights under UK GDPR

As a UK resident, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your account and personal data
• Portability — request your data in a machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email us at offercheck.uni@gmail.com. We will respond within 30 days.

If you are unhappy with how we handle your data, you can lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Data security

We use HTTPS across the entire site. Your account is protected by Supabase authentication. We will notify you promptly if a data breach occurs that is likely to affect your rights or freedoms.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent update.

10. Contact

Questions about this policy? Email: offercheck.uni@gmail.com