Last updated 29 September 2026
Privacy Policy
Stridly collects as little personal data as possible. This page explains exactly what we store, why, how long we keep it, and how to delete it.
Who we are
Stridly is a website that lists internships, scholarships, grants, courses, and similar opportunities. Stridly is the data controller for the information described below. You can contact us at [email protected].
What we collect
If you create an account
- Your email address — to identify your account.
- Your password, stored only as a one-way bcrypt hash. We can't see or recover your actual password.
- The date your account was created.
We don't ask for your name, phone number, date of birth, school, or location.
If you subscribe to the newsletter
- Your email address and the date you subscribed.
- A random unsubscribe code, so the link in each email removes you with one click.
When you log in
A session record (a random ID, your account ID, and an expiry date) so you stay logged in. It's deleted when you log out or after 7 days.
Security
To block password-guessing and spam, we briefly keep your IP address in server memory to count requests. It's never written to our database and is discarded within 15 minutes. Our hosting provider may keep standard server logs (including IP addresses) for a short period for security and reliability.
What we don't do
- We don't use analytics, tracking pixels, or session recording.
- We don't sell, rent, or share your personal data with anyone.
- We don't send you marketing unless you subscribe to the newsletter.
Advertising
Stridly is funded by ads from Google AdSense. Google's ad code is only loaded if you choose “Allow ad cookies”. When it loads, Google may use cookies and similar technology to show and measure ads, as described in Google's advertising policy. Google acts as an independent controller for that data. If you reject ad cookies, no Google ad code is loaded at all. See our Cookie Policy for details.
Why we're allowed to use your data
- Account and login data: to provide the account you asked for (contract).
- Newsletter: your consent, which you can withdraw by unsubscribing.
- Ad cookies: your consent, which you can withdraw in Cookie settings.
- Rate limiting and security logs: our legitimate interest in keeping the site safe.
How long we keep it
- Account data: until you delete your account.
- Login sessions: up to 7 days.
- Newsletter email: until you unsubscribe — the address is then deleted, not just flagged.
- Your cookie choice: 6 months, then we ask again.
Your rights
You can, at any time:
- Delete your account yourself from the Account page.
- Unsubscribe using the link at the bottom of any newsletter.
- Change your ad cookie choice with “Cookie settings” in the footer.
- Ask us for a copy of your data, or to correct or delete it, by emailing [email protected].
- Complain to your local data protection authority.
How we protect your data
All traffic is encrypted with HTTPS. Passwords are hashed, session cookies can't be read by scripts, and we use strict security headers, rate limiting, and input validation. No system is perfectly secure, but if we ever learn of a breach affecting your data, we'll tell you and the relevant authorities as the law requires.
Children
Stridly is intended for students aged 16 and over. We don't knowingly collect data from children under 13. If you believe a child has created an account, contact us and we'll delete it.
Changes
If we change how we use your data, we'll update this page and the date at the top. Significant changes will be announced on the site.