Privacy Policy
This page explains what we collect, why we collect it, who else sees it, and how to get rid of it.
Last updated:
Who runs this service
U-Ariadna College Consultant is operated by the operator of uariadna.com, an individual based in California — not a company, a school, or a college. Questions about this policy, or requests about your data, go to privacy@uariadna.com.
What we collect
When you create an account
Your email address. That is the only thing we ask for. There is no password to remember: you sign in with a link sent to your email, or with Google. We do not ask for your name, your phone number, or your date of birth.
What you tell us about your student
The plan is built around one student, so the profile holds what a plan needs: first name, high school, graduating class, GPA, current courses, strengths, extracurricular activities, majors of interest, campus and location preferences, and whether the family expects to need financial aid. There is an optional free-text field for anything else you want recorded.
Two fields — SAT and ACT scores, and California residency — are collected for a college-matching feature that is still being built. They are stored and shown back to you, and nothing else uses them yet.
You can leave any of this blank. The plan works with less; it just gets less specific.
What the product records as you use it
Which checklist items you have completed, which colleges you have saved and how you have classified them, notes you write about a college, reminder preferences, and the questions you ask the built-in assistant along with its answers. If you upload a profile picture, we store the image.
What is collected automatically
Our web server records standard request logs, including IP addresses, as part of running the site securely. The application itself reads your IP address to limit how many requests one visitor can make in a minute; it is used in memory for that check and is not written to our database.
On the marketing site at www.uariadna.com, we use Google Analytics — but only if you agree to it first. See the cookie page for what that involves and how to change your mind. The signed-in product at app.uariadna.com carries no analytics at all.
Why we collect it
- Your email — to sign you in, and to send the reminders you asked for. Nothing else.
- Your student's profile — to build the four-year plan, work out where the A–G requirements stand, and sort colleges into Reach, Target and Likely.
- Your progress and saved colleges — so the plan remembers where you are between visits.
- Server logs and rate limiting — to keep the service running and resist abuse.
- Analytics on the marketing site — to see how many people arrive and which buttons they press.
Who else sees your information
We do not sell your information, and we do not share it for advertising. We do not use it to target ads anywhere. The companies below process data on our behalf so the service can function:
- Supabase— sign-in and the database where your account and your student's profile are stored. Hosted in the United States.
- Hetzner — the server that runs the application, located in Oregon. Uploaded profile pictures stay on this server and are not sent anywhere else.
- Resend — sends the reminder emails and sign-in links. Receives your email address and the contents of those messages.
- OpenRouter and Anthropic— power the built-in assistant. When you ask a question, your question is sent along with your student's profile so the answer fits your situation. That includes their first name. Their surname, their school, and anything you typed into the optional free-text field are never sent. We route only to providers that do not keep or train on what we send. Whatever you type into the chat yourself is sent exactly as you wrote it.
- Google Analytics — only on the marketing site, and only after you agree.
- Cloudflare — manages the domain name and forwards email sent to our contact address.
We may also disclose information if the law requires it, or if it is necessary to investigate abuse of the service.
How long we keep it
Your account and everything attached to it stay until you delete them. Delete your account and the student profiles, checklist progress, saved colleges, notes and assistant conversations are removed with it — this is enforced by the database itself, not by cleanup that might be forgotten.
Server request logs rotate on their own within a short period. Analytics data on the marketing site is retained by Google under the settings of our account.
Deleting your account or your data
Go to Settings → Account and choose Delete account. You will be asked to confirm. There is also a way to remove one student without deleting the whole account.
If you would rather we did it, or you want a copy of what we hold, write to privacy@uariadna.com. We will need to confirm you control the account's email address before acting.
Security
The site is served over HTTPS. Sign-in is passwordless, so there is no password of yours for us to lose. Data is separated by account: the code checks ownership on every read and write, and a request for someone else's record returns nothing.
No service can promise perfect security, and we will not pretend otherwise. If we ever discover a breach affecting your information, we will tell you.
California users
This service is run from California for families in California, and the sections above apply to you in full.
Do Not Track.Some browsers can send a "Do Not Track" signal. There is no agreed standard for how sites should respond to it, so we do not act on it. Instead we ask you directly before turning analytics on, and you can withdraw that at any time on the cookie page.
Third parties tracking across sites. If you accept analytics, Google Analytics may recognise your browser on other sites that also use it. Decline, and nothing is loaded.
Selling and sharing. We do not sell personal information and do not share it for cross-context behavioral advertising, as those terms are used in California law.
Children's privacy
This service is intended for people aged 13 and over. It is built for high school students and their parents, and it is not directed to children under 13. We do not knowingly allow anyone under 13 to create an account, and we do not ask any user for a date of birth.
A parent normally creates the account and enters the student's profile. If you believe a child under 13 has created an account here, write to privacy@uariadna.com and we will remove it.
Changes to this policy
If this policy changes, the date at the top changes with it. Material changes will also be announced inside the product, so you are not expected to re-read this page looking for differences.
Contact
privacy@uariadna.com — for anything on this page, including access, correction and deletion requests.