Privacy & Cookie Policy

Last updated: 16 August 2026

EU Graduate ("we", "us") takes your privacy seriously. This page explains what data we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR / DSGVO).

1. Who is responsible

Data controller: [YOUR NAME / COMPANY NAME], [ADDRESS], contact: info@eugraduate.com.

2. Cookies and local storage we use

Name	Type	Purpose	Duration	Legal basis
eugrad_session	Strictly necessary cookie	Keeps you logged in to your account	30 days	Art. 6(1)(b) GDPR — contract performance
eu_lang	Functional (localStorage)	Remembers your language choice	Until deleted	Art. 6(1)(f) GDPR — legitimate interest
eu_cookie_consent	Strictly necessary (localStorage)	Stores your cookie consent choice	Until deleted	Art. 6(1)(c) GDPR — legal obligation
eu_track_sid + usage analytics	Analytics (sessionStorage)	Measures how logged-in members use our tools (pages visited, time spent, practice scores) so we can improve EU Graduate's products and services	Per browser session	Art. 6(1)(a) GDPR — your consent

Analytics only runs if you click "Accept analytics" in the cookie banner. If you decline, nothing changes about how the platform works for you — we simply don't measure your usage.

3. Why we use analytics

Usage analytics help us improve your experience and enhance EU Graduate's products and services. Concretely, they show us which tools help candidates most, where members get stuck, and which content is worth expanding — so the platform gets better for everyone preparing for the AD5 competition.

4. Withdrawing your consent

You can withdraw your analytics consent at any time, with effect for the future: clear this site's cookies and site data in your browser, and choose "Decline" the next time the banner appears. You can also email us at info@eugraduate.com and we will delete your recorded usage data.

5. Other data we process

Account data (email, name, password hash): to provide your account. Art. 6(1)(b) GDPR.
Payment status: payments are processed by our payment provider Polar (polar.sh). We never see or store your card details; we only receive confirmation of your membership status. Polar's privacy policy applies to the payment itself.
Emails (verification, onboarding, newsletter): newsletter only with your opt-in; you can unsubscribe anytime. Art. 6(1)(a) GDPR.
Support bookings (name, email, question, chosen slot): to organise your support call. Art. 6(1)(b) GDPR.
Security logs (failed login attempts with IP address): to protect accounts against attacks, deleted after 24 hours. Art. 6(1)(f) GDPR.

6. Hosting

The platform is hosted by Hostinger within the EU. Server log files (IP address, time, requested page) are processed for operation and security. Art. 6(1)(f) GDPR.

7. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You also have the right to lodge a complaint with a supervisory authority. To exercise any right, email info@eugraduate.com.

8. Data retention

Account data is kept while your account exists and deleted upon account deletion. Usage analytics are kept for a maximum of 24 months. Consent records are kept as proof of compliance. Login-security records are deleted after 24 hours.