Privacy Policy

This policy explains the information Campus Deals handles when you create an account, browse Tallahassee deals, connect with friends, save listings, report a problem, claim a business, or use Partner billing. Campus Deals is the service at getcampusdeals.com. We do not currently sell personal information or run a third-party advertising tracker in the app code.

Information we handle

• Account and authentication: If you sign up, Supabase Auth processes your email address, password, account name, verification and recovery activity, and email confirmation status. Campus Deals receives the sign-in request over HTTPS and forwards it to Supabase; it does not store your password in its database. Secure, HTTP-only session cookies keep you signed in. Email delivery for authentication is routed through the configured SMTP provider, Resend.
• Saved listings: A verified account is required to enter the student app. Favorites and their creation times are stored against your account ID so they can sync across devices. Older browser-only favorites may still be stored on devices that used Campus Deals before this change.
• CampusDeals identity, Friends, Messages and Crews: Student onboarding creates a basic profile with a public display name, username, and chosen CampusDeals avatar. Other signed-in members can find and view those fields. Your interests, Saved, Want to Go, email, individual deal-use history, and exact savings total are private by default. Follower and mutual-friend counts are visible on member profiles; full connection lists are available only to their account holder. Suggestions and member profiles may show a count of mutual CampusDeals friends, without publishing those private lists. Suggestions use mutual relationships and exclude blocked accounts; they do not use uploaded contacts or outside social networks. You can separately choose public spots, earned milestone labels, interests, your Favorite Spot, and public Picks. Only those selections appear on your social profile. If you separately opt to share social badges (off by default), a small earned badge may appear based on distinct friends responding to your shared deals; raw sending volume does not earn it. Taste-overlap labels compare your own interests with interests the other person intentionally shared. Mutual friends can exchange direct messages and deal cards; each conversation is visible to its participants. Active Crew members can see that Crew’s membership, invitations, messages, deal plans, and “I’m In” responses. Messages and deal shares are stored by Campus Deals; they are not end-to-end encrypted. If someone reports a message or account, a restricted administrator may see the reported content and related information to investigate and moderate it. We store social reports and in-app updates for this purpose. Blocks suppress profile discovery and direct interactions. Do not put sensitive information in messages.
• Notifications and email: Friends-related updates, such as follows and Crew invitations, are available inside Campus Deals. Unread message and Crew counts are shown in the app. Campus Deals does not currently offer phone push notifications, deal-alert subscriptions, or a student marketing-email program. Account verification and password-reset emails are transactional messages sent through Supabase Auth and Resend. Stripe may send billing or payment-recovery emails for business subscriptions. Adding Campus Deals to your Home Screen does not turn on push notifications.
• Personalization: If you are signed in, your chosen favorite categories and optional Favorite Spot are stored with your account and sync across devices. Your chosen CampusDeals preset avatar ID is stored with your account. New student photo uploads are disabled. If you uploaded a profile photo previously, it remains private to your account and the restricted administrator for account support until you remove it or delete your account. Whether you recently saw a non-blocking post-save sharing suggestion is stored in this browser for up to a week between prompts. Recent send recipients come from existing conversations, not private browsing. A short list of recently opened deal IDs, your last Explore/Map search, whether you dismissed the interests prompt, and appearance are stored only in this browser. Campus Deals uses your interests, saved businesses, and reported deal use to order a small For You section. Favorite Spot is shown on your private Profile; it is not currently used to rank deals. Business dashboards do not receive your individual preferences, photo, or viewing history. Other signed-in members, including business owners using a personal account, can see content you intentionally publish on your social profile.
• Reported deal use: If you tap Redeem Deal while signed in, we store your account, deal, business, and time. When a verified same-item price comparison is available, we also store the regular price, deal price, and estimated difference at that time; otherwise the savings amount is blank. This is your report of use, not proof of purchase. Your account shows your history and totals. Active Partners see aggregate counts, distinct account counts, trends, and calculable estimated savings for their own business; they do not receive student names or email addresses in these analytics. Administrators can inspect business-level aggregate analytics.
• Usage and promotion analytics: We record limited events such as a visible deal-card or sponsored-campaign impression, business or deal page view, save, directions tap, website or phone tap, and sharing actions such as confirmed in-app sends, copied links, and completed native-share handoffs. These are not proof of delivery or reading. An event stores its type, relevant deal, business, or campaign ID, time, a browser-generated visitor ID, and, when signed in, an account-linked actor ID. Passive views are deduplicated for about 30 minutes. The visitor ID is stored in browser local storage. Campaign summaries show actual placement impressions and deal activity during the campaign day; this does not prove a resulting purchase or that the promotion caused the activity. Owner and administrator activity is excluded from campaign customer counts where identifiable. These measurements support service quality and private Partner analytics; they do not prove a visit or unique person.
• Business participation: Claims ask for a claimant’s name, role, business email and phone, requested verification method, and explanation. Approved ownership, invitations, submitted business details and deals, verification actions, and subscription status are stored to administer the listing. Public business details and approved deals are visible to visitors. Paid verified managers can upload product photos for their deals; we store the image and bounded preview with its associated business/deal and upload time. Photo files are public assets when displayed; do not upload private or sensitive information. Images are resized and re-encoded in the browser before upload. Ending a subscription does not automatically erase stored merchant images. Claim contact details are for review, not public display.
• Reports: A deal report may include a reason and optional details; deal reports are stored without a Campus Deals account ID. Business-information reports may be associated with a signed-in account ID. Do not put unnecessary personal or sensitive information in report details. To limit abuse, we briefly process the requesting network address and store a one-way hash with rate counters; we do not store the raw address in the report record.
• Contact requests: The contact form collects the email address, topic, message, and submission time you provide. A private administrator queue holds the request for a response and resolution. Do not include passwords, payment information, or identity documents in your message.
• Billing and promotional credits: Stripe receives information needed for Partner or Pro checkout and one-time promotion purchases, including the business, billing customer, and account email. Campus Deals stores Stripe customer, subscription, Checkout, and payment references; plan and renewal/cancellation status; webhook event IDs; credit grants, use, and refunds; and campaign deal, date, and status. Payment-card and bank details are entered with Stripe, not stored by Campus Deals.
• Location and images: If you allow browser location access, your device’s coordinates are used in the browser to calculate nearby distances; Campus Deals does not intentionally save your precise coordinates in its database. Administrators may upload business images to the site’s storage. We do not ask students to upload personal photos.

How information is used and shared

We use these records to authenticate accounts, synchronize favorites, verify business control, publish and moderate accurate listings, prevent abuse, operate billing, and show measured analytics only to an approved business manager with an active Partner subscription. For support and operations, the restricted administrator can review account identity, saved items, reported deal use, interests, and related business and billing status; opening an individual account is recorded in an administrator access log. Businesses do not receive individual student account details. Public deal and business content appears in the app. We use Supabase for identity, Resend for authentication email delivery, Stripe for payments, and Sites/Cloudflare infrastructure for hosting, database, and images. Those providers process information to perform these services. Following a link to a business, map, social page, or Stripe opens that third party, which may collect information under its own policy.

Account-first access and external sharing

Normal student browsing requires a signed-in, email-verified account and a display name, unique username, and chosen preset avatar. Only those basic identity fields are visible to other signed-in members by default. Friends, Crews, public Picks, sharing your Favorite Spot, interests, and location permission are optional. Administrator and business-management access follow separate permissions.

Terms, Privacy, Contact, authentication and recovery pages, and limited public deal previews can be opened without an account. Public previews and link metadata contain public deal context, including the business, offer, schedule, and restrictions; they do not show the sender’s identity, private saves, activity, email, messages, or Crew membership. When sharing, you may opt to include your public @username profile link in the deal URL. It is shown as a profile-link attribution only after the recipient signs in, and is not proof of who sent or opened the link. QR codes contain only your canonical public-profile URL and are generated on your device, without an outside QR provider. The full student catalog is not available through the preview. If you share externally, the selected app or provider handles the link under its own practices and may retrieve its public preview. CampusDeals does not receive proof that a recipient read it.

A validated internal destination, such as the shared deal path, is passed through sign-in and email verification and temporarily kept in browser session storage so onboarding can return you to it. It does not include the sender’s identity or private sharing information. Existing email-verification links contain authentication information needed by the identity provider; do not forward those verification links to others.

Your choices

You need a verified account to use the student app. You can remove favorites, decline browser location access, change your interests or appearance in Settings, and clear browser storage to reset device-only preferences and the visitor ID. Public Favorite Spot sharing and Picks remain optional. You can also choose specific public spots, share earned milestone labels (including estimated-savings thresholds), and share your chosen interests from your public-profile controls. These sections are off by default. Selected spots do not disclose whether you saved or used a deal there, visit dates, or individual deal-use records. Sharing milestones does not publish your exact savings total. Turning a section off removes it from subsequent public-profile responses. Signed-in users can use Profile to delete an account when the secure identity-provider deletion connection is available. If deletion is unavailable or blocked by an active business subscription, use the contact method below so we can help resolve the request safely. A business owner may request corrections through the business profile or report inaccurate information.

What account deletion does

Account deletion also removes your social profile and username, follows, blocks, public picks, private Want to Go list, direct messages and deal shares, Crew membership, messages, and “I’m In” responses. A Crew with other active members transfers to a remaining member; an empty Crew is removed. Social reports may remain for safety review with your identity detached.

Completed account deletion removes the Supabase login and Campus Deals account row, account interests, Favorite Spot, chosen preset avatar and any legacy private profile photo, account favorites, reported redemption history and associated savings amounts, method/version, reference-price snapshots and source basis, account-linked analytics events, pending business claims, and that account’s business-manager access. The current browser also removes that account’s device-only recent-deal history and prompt choice; on other devices, you can clear browser storage to remove their local copies. Removing redemption records also reduces subsequent business aggregate counts. Reviewed claims and verification history are detached and stripped of the claimant’s personal contact details, while underlying public business and deal records remain. Existing reports are anonymized where linked. Resolved contact requests matching the account email are stripped of their email and message; pending contact requests remain until handled. A current or unresolved Partner or Pro subscription or unused purchased promotional credits may require billing review before self-service deletion, so payment and business obligations are not orphaned. Stripe and Campus Deals may retain payment, credit, campaign, and invoice records for legal, accounting, dispute, fraud-prevention, and service-delivery obligations, detached from the deleted personal account where appropriate. Provider logs and backups may not disappear immediately. Anonymous analytics from a browser before sign-in cannot always be associated with the account and may remain in aggregate records.

Retention and security

Account data is retained while the account operates, subject to deletion as described above. Business listings and source/verification history may remain after a manager leaves. Analytics and moderation records do not currently have a universal automatic deletion date; we are defining a documented retention schedule before broad commercial launch. Report rate counters expire and are removed during routine cleanup; authentication abuse controls may retain hashed identifiers for security until cleanup. Stripe and other processors may retain records under their own obligations. Campus Deals uses HTTPS, server-checked account and business permissions, limited-access admin tools, and secure session cookies. No internet service can guarantee absolute security.

Questions and updates

We may update this policy when the service or its providers change and will revise the date above. For access, correction, deletion, or privacy questions, use the Campus Deals contact form below. Please do not submit passwords, payment-card numbers, or identity documents.

Send a request through the Campus Deals contact form. It goes to a private administrator queue. We may need to verify your identity before acting on an access or deletion request.