The matching stays in your browser. The grades, test scores and preferences you type into the search are processed on your own device and saved in its local storage. They are not sent anywhere: we cannot read them, lose them or hand them over. The budget is the one exception, and it is explained below. Clearing your browser data erases them — we have no copy. The same goes for your shortlist of favourite schools.
Your profile is a different thing, and it only exists if you ask for it. If you sign in and fill in the Biography or the CV builder, that is stored on our servers — it has to survive you closing the tab. It holds your university, grades, test scores, work and volunteering history, interests and, if you choose to give them, your phone number and LinkedIn.
Your budget is the one exception to the rule above, and it applies only while you are signed in: the annual figure you set in the search is stored with your profile. We keep it because it is the only honest measure we have of what a student can actually afford — without it we cannot tell whether the programmes we put in front of you are within reach. It is a number and a currency, nothing else, and it never appears in your biography or your CV: those are documents you hand to other people.
Two things, and each only if you ask for it. Your email address plus the schools you want deadline alerts for, and — separately — the profile described above, if you create one. Nothing is stored for a visitor who only searches.
If you sign in with Google we receive your email address and the fact that Google considers it verified. We store the address. We do not receive, and never ask for, your password, your contacts or anything else in your Google account.
Signing in on its own stores nothing: a record is created when you save a list of schools, when you create a profile, or when you set a budget while signed in.
To send you an email when one of your chosen schools opens applications or announces its dates. That is the only use. We do not profile you, we do not advertise, and we never sell or share your address with anyone.
The budget has a different purpose. Read together, those figures tell us what the students who use AteneoMatch can actually afford, so that the catalogue we build and the programmes we put in front of you stay within reach. It is never sold, never shared, and never attached to anything you make public.
The legal basis is your consent (GDPR art. 6(1)(a)), given either by clicking the confirmation link we email you, or by signing in and then saving a list or setting a budget. You can withdraw it at any moment, and withdrawing is instant and self-service.
| Who | What for | Where |
|---|---|---|
| Vercel | Hosting, serverless functions & cookieless visit measurement | USA (EU data-processing addendum) |
| Supabase | Database | Frankfurt, Germany (EU) |
| Resend | Sending email | EU (Amazon SES, eu-west-1) |
| Cloudflare | Turnstile anti-bot check | Global CDN |
| Sign in with Google (only if you use it) | USA / global | |
| OpenStreetMap (Nominatim) | City name suggestions while you type | EU (OSM Foundation) |
There is no advertising or tracking cookie on this site, and no cookie is used to measure traffic: we count visits with Vercel Web Analytics, which is cookieless — it stores nothing on your device and never follows you to another site. That is why you have never seen a cookie banner here.
Two strictly necessary cookies exist and only if you sign in: one holds your session (it is httpOnly, so the page's own JavaScript cannot read it), and one short-lived cookie protects the sign-in redirect against forgery. Both disappear when you sign out.
Cloudflare's Turnstile, the check that stops bots from submitting the signup form, may set its own technical cookie. It is there to tell humans from scripts, not to follow you.
Until you say stop. Turning every school off, or clicking unsubscribe in any email, deletes the record outright — we do not keep a suppressed copy of your address.
Your profile stays until you delete it. Ask us and it goes, in full, including the CV material — there is no archived copy.
Our hosting provider keeps ordinary server logs (IP address, browser, page requested) for a short period for security and debugging. We do not use them to build any picture of you.
You can ask us to show you, correct, export or erase everything we hold about you, and you can object to it being processed at all. Because we hold so little, this is usually a one-line answer.
Write to info@ateneomatch.com and we will reply within 30 days. If you think we have handled your data badly you can complain to your national data-protection authority — in Italy, the Garante per la protezione dei dati personali.
AteneoMatch is built for people choosing a master's degree and is not directed at children. We do not knowingly store data from anyone under 16.
If we start collecting something new, this page changes first and the date at the top moves. Anything that widens what we do with your email will be asked for again, not assumed.