Legal
Privacy Policy
Last updated: 2026-10-25
1. Who is responsible
Max Porcar Arenós (self-employed), operator of odiseago.com ("Odisea"). Contact: contact@odiseago.com.
2. What we collect
- Account: name, email and password (encrypted), or your basic Google details if you sign in with Google.
- Destination test: your answers and results, to generate and store your shortlist.
- Plan & tools: your exchange plan, checklist, saved destinations and saved budget.
- Student connect (optional): only if you opt in, the Instagram/WhatsApp/email you choose to share — visible only to students going to your same destination who also opted in. Never public.
3. What we use it for
- Providing the service: test results, profile, tools.
- Sending you emails with your results, deadline reminders you configure, and Odisea tools/updates (accepted when creating your account; unsubscribe anytime by writing to contact@odiseago.com).
4. Who we share it with
We do not sell your data. We use technical providers to run the service: web hosting (Hostinger), account database (Supabase, EU), email delivery (Brevo) and test-ranking processing (OpenRouter — receives your test answers pseudonymously, without your name or email).
Housing partner (Uniplaces): if you use the Uniplaces housing offer, and only if you tick that specific consent box, we share the name, mobile number, email address and destination you enter with our housing partner Uniplaces Limited (United Kingdom), for the sole purpose of verifying the offer and attributing a booking to Odisea. We keep these housing leads for a maximum of 12 months and then delete them automatically.
5. Your rights
You can access, correct, export or delete your data from your profile (Account → Export / Delete my account) or by writing to contact@odiseago.com. You can withdraw email consent at any time.
6. Retention
We keep your data while your account exists. When you delete it, your personal data is removed from our active systems.
7. Learning Agreement service
If you order the paid Learning Agreement draft, we process your name, email, phone (optional), university and degree, subjects, destinations and any files you upload, only to prepare, deliver and invoice the service. It is stored in Supabase (EU servers); payment is processed by Stripe (we never see your card) and emails are sent by Brevo. Unpaid requests are deleted after 30 days and delivered ones 12 months after delivery; invoices are kept for as long as tax law requires. Legal basis: performing the contract you ask for.
8. Analytics and cookies
We measure visits on every page, including the visitor's approximate country. Ahrefs Web Analytics, Cloudflare Web Analytics and PostHog EU Cloud count pages viewed, clicks and approximate country without cookies and with IP anonymisation. Google Tag Manager and Google Analytics load on every page and use analytics cookies for every visitor; advertising cookies are never used. PostHog cookies and anonymised session replays (with all form inputs masked) are only used if you accept; if you reject, PostHog keeps counting without cookies. Test answers and form contents are never recorded. You can change your choice at any time through Cookie settings, and delete or block cookies through your browser.
WhatsApp access and security
We collect your name, email, declared WhatsApp number, joining reason and housing answer to manage group access. Security checks help limit automated requests; when Turnstile is enabled, Cloudflare processes browser signals for that purpose. These checks do not verify your identity, email or phone. Housing messages and the email newsletter require their own optional permissions.