Privacy

What we collect, and what we do not

You can read every page on this site without an account, without giving us anything, and without being asked to. This page is about the few times that is not true.

Who we are

A.I.T. Multiverse Consulting Ltd, Nicosia, Cyprus, is the data controller. Write to privacy@studiesmultiverse.com.

If you just read the site

Nothing identifying is collected. We use Cloudflare Web Analytics, which counts page views without cookies, without a device fingerprint, and without anything that follows you between sites. We cannot tell one reader from another and do not try to.

Our servers keep ordinary request logs — including your IP address — for a short period to keep the site up and to stop abuse. Lawful basis: our legitimate interest in running a working, un-attacked service.

If you save schools to a shortlist

The shortlist lives in your own browser. It is never sent to us, so we could not read it if we wanted to. Clear your browser data and it is gone.

If you write to an institution

The enquiry form on a paid listing asks for your name, your email, where you are writing from, and your message. All four go to the institution you wrote to. We keep a copy so that we can answer you if the institution never replies, and so the institution can find the message later.

• Lawful basis: performing the service you asked for.
• Who else sees it: the institution you wrote to. Nobody else. We do not sell enquiries, pass them to agents, or use them to market anything to you.
• How long: two years, then deleted.

If you claim a listing

We store the email address you give, a hash of your recovery code, and — if you turn on two-step sign in — a secret shared with your authenticator app. We record each sign-in attempt with its time, IP address and country, which is what lets you see a sign-in from somewhere you have never been.

• Lawful basis: performing the contract, and our legitimate interest in keeping your account from being taken.
• How long: for as long as you hold the listing, and twelve months afterwards. Sign-in records are kept twelve months.
• What we never store: a password, because there is no password. Nothing here can be used to sign in as you.

Advertising, and the part that is not ours

Some pages carry Google advertising. Google and its partners set cookies to choose and measure adverts, and that is Google processing your data under its own policy, not ours.

• Ads never appear on a page that carries an official record about a named institution, on a search or listing page, or on the page of an institution that pays us. That is enforced in our code, not by hand.
• In the EU and UK you are asked before any advertising cookie is set, and refusing is a real choice that costs you nothing on this site.
• You can review and change it at any time on the cookies page.
• Google’s own explanation: how Google uses data when you use our site.

Affiliate links

Some links to services students need — banking, insurance, transfers, accommodation — earn us a commission. They are labelled. Following one takes you to that company, which then handles your data under its own policy. We are not told who you are.

Institutions listed here

We publish factual information about educational institutions: name, country, kind, city, website, and where a government publishes one, standing on the official register. That is information about organisations, not about people, and it comes from open-licensed public sources named on every page. We publish no individual’s contact details unless the institution adds them itself.

If a listing contains something about you personally, or you want it corrected or removed, tell us. No account needed, no charge, and we answer from a person.

Where your data goes

The site runs on Cloudflare, which processes data in the region closest to you. Email is sent through Microsoft 365. Advertising is Google. Each of them is a processor under a data processing agreement, and none of them is given your data to use for their own marketing.

Your rights

Under the GDPR you may ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. Write to privacy@studiesmultiverse.com and we will answer within thirty days. There is no charge and we will not ask you why.

If we get it wrong you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the authority where you live. We would rather you told us first.

Children

This site is for people choosing where to study and is not directed at children under thirteen. We do not knowingly collect their data. If you think we hold a child’s data, write to us and it will be deleted.

Privacy · Cookies · Terms · How we make money · Corrections