CampusCribs LLC (“CampusCribs”, “we”, “us”) runs campuscribs.org, a housing marketplace for University of Cincinnati students. This policy explains what we collect, why, and the choices you have. CampusCribs is independent and not affiliated with the University of Cincinnati.
What we collect
When you create an account
- Your name, email address and username.
- Your password, which is handled by our sign-in system and stored only as a secure hash. We never see it in plain text.
- Whether your email is a verified uc.edu address. If it is, your account is marked student verified.
- The dates your account was created and last updated.
When you answer the onboarding survey
Your answers to five multiple-choice questions about what you're looking for (for example, whether you want to sublease your place, find a place, or find roommates). We use them to decide what to build first.
When you use the site
- Usage analytics: pages you view, links and buttons you click, how long you stay, your browser and device type, the page that referred you, and approximate location derived from your IP address. We also record errors your browser hits so we can fix them.
- Session recordings inside the app: once you're signed in, we may record how you move through the app (clicks, scrolling, page changes) to find confusing spots. Everything you type into a form is masked and never recorded. We don't record the public marketing pages or guides.
- Server logs: our hosting providers log IP addresses and request details for security and reliability.
If you're signed in, analytics are tied to an internal account ID, never to your name or email.
How we use it
- To create and secure your account and keep you signed in.
- To verify student status from your uc.edu email.
- To email you about your account (verification, password resets) and about early access and launch.
- To understand how the site is used and decide what to improve.
- To prevent fraud, scams and abuse, and to comply with the law.
We don't sell your personal information, and we don't share it for targeted advertising.
Who we share it with
Only the service providers that run CampusCribs for us, and only what each one needs:
- Cloudflare, which hosts the website and routes traffic to our servers.
- PostHog, for usage analytics, error tracking and in-app session recordings.
- Resend, which delivers our account emails.
- OpenStreetMap: our neighborhood map loads map images from OpenStreetMap's servers, which receive your IP address when the map is shown.
We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of CampusCribs (in which case this policy would continue to apply to your data).
Once listings and messaging launch, information you choose to put in a listing or a message will be visible to the people you share it with. We'll update this policy before then.
Cookies and browser storage
We use browser storage to keep you signed in, and PostHog uses a cookie and browser storage to recognize returning visitors. We don't use advertising cookies. If your browser sends a Do Not Track signal, we don't load analytics. Blocking cookies won't break the public pages, but you'll need browser storage to stay signed in.
How long we keep it
We keep your account and survey answers until you delete your account. Analytics and session recordings are kept for a limited period under our PostHog plan and then deleted. Server logs are kept briefly for security.
Your choices
- Access, correct or delete your data: email team@campuscribs.org from the address on your account. We'll respond within 30 days. Deleting your account removes your profile and survey answers; we'll also ask PostHog to delete analytics tied to your account.
- Emails: every marketing email has an unsubscribe link. Account emails (like password resets) can't be turned off while you have an account.
- Analytics: turn on Do Not Track or use a content blocker.
Security
Connections to CampusCribs are encrypted, passwords are hashed, and access to our systems is limited to the people who run them. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as the law requires.
Children
CampusCribs is for college students and isn't meant for anyone under 13. We don't knowingly collect data from children under 13; if you believe we have, email team@campuscribs.org and we'll delete it.
Changes
If we change this policy, we'll update the date above. For significant changes, we'll also let account holders know by email before they take effect.
Contact
Questions or requests: team@campuscribs.org.