Last updated: October 2026
The website is hosted by Cloudflare, Inc. (San Francisco, USA). When you visit it, Cloudflare processes technically necessary data such as your IP address, the time and the page requested, in order to deliver the site and protect it against abuse (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or on standard contractual clauses.
The website sets no cookies and uses no analytics or advertising services. It loads no fonts or scripts from third-party servers. Your language choice is stored only in your own browser (local storage) and is never sent to us.
If you apply as a tutor, we process your name, email, country of residence, profession, the exam you passed and the year, your registration or licence number if you give it, your teaching languages, your hourly rate, how you heard about us and the language of the page you used. We use this to review your application and to contact you (Art. 6(1)(a) and (b) GDPR). Your profile is published on the platform only with your separate, explicit consent.
If you join the waitlist, we process your first name, email, the exam you are preparing for and your preferred language, in order to tell you when tutors for your exam become available (Art. 6(1)(a) GDPR). We send no newsletters or other advertising.
Form submissions are stored in our Cloudflare account (see section 2) and can only be viewed by us. For each new submission we receive a short email alert sent through Resend (Resend, Inc., USA). The alert contains only the type of form, the exam, profession, country, hourly rate or preferred language – never your name or email address. Transfers to the USA are based on standard contractual clauses. If we reply, we use a Google Mail mailbox (Google Ireland Ltd.).
Tutors can create an account with their email address. Instead of a password
we send a one-time login link by email (through Resend, see section 5). After
signing in, a session cookie (pp_session, valid 30 days, strictly
necessary, no tracking) keeps you logged in. Account and profile data are
stored in a Cloudflare D1 database (see section 2).
The profile you create – name, profession, the exam you passed and the year, country, teaching languages, hourly rate, headline, description and, if you enter it, your registration or licence number – is published on this website as long as you keep the profile visible. Your email address and video-call link are never published. You can edit or hide the profile at any time in your dashboard, and ask us by email to delete the account. To limit abuse we store the number of login requests per email address and IP address for one hour.
If you request a session from a tutor's profile, we store your name, email, preferred times and message, and send you a confirmation link. Only after you confirm do we pass these details to the tutor by email. If the tutor accepts, you receive the tutor's video-call link and email address. Requests are deleted twelve months after they were made.
Online payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. If you pay for a session, you enter your card details on Stripe's payment page; we never see them. We store the amount, currency and Stripe's payment reference with your request. Tutors who want to be paid through PassPeers open a Stripe account linked to our platform; the identity and bank details Stripe asks for are entered on Stripe's pages and are held by Stripe, not by us. Stripe's privacy policy: stripe.com/privacy. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Waitlist entries are deleted twelve months after sign-up or as soon as you ask us to. Tutor applications that do not lead to a profile are deleted after six months. Accounts are deleted on request. Statutory retention duties (for example for invoices) remain unaffected.
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw your consent at any time with effect for the future by emailing us. You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection of Lower Saxony (Germany).