Privacy
Last updated 1 August 2026. This explains what SeasonStamp collects, why, and what we deliberately don’t keep.
The short version
- · We never store your sponsor’s email, or any document.
- · Your name and email are never shown on your reviews.
- · We don’t use analytics, advertising, or tracking cookies.
- · You can delete your account and your reviews at any time.
Who is responsible
SeasonStamp is operated by Branislav Lelák, Slovakia. For anything on this page, or to exercise any right below, email branislav3lelak@gmail.com. We answer within 30 days, usually much sooner.
What we collect
When you make an account: your email address, a display name, and optionally your home country. Your password is never stored — only a scrambled version that cannot be turned back into your password.
When you write a review: whatever you type — rating, pay, hours, housing, season, and your comments. This is published. Your display name appears; your email never does.
When you verify a placement: this is the part worth reading carefully.
Verification: what happens to your email
You give us the sponsor email that names where you worked. We check the signature your sponsor attached to it, take four facts, and throw the message away. It is never written to disk or to our database.
What we keep instead:
- · A fingerprint of the message. A one-way scramble that stops the same email verifying two accounts. It cannot be turned back into anything readable.
- · A fingerprint of the address your sponsor wrote to, and whether it matched your account. Again one-way — we can compare, we cannot read it back.
- · Your sponsor’s domain (for example interexchange.org) and the year.
- · The subject line, and only while the employer it names isn’t listed on SeasonStamp yet — it lets you add that employer without uploading anything again. It is deleted the moment that’s done.
If your sponsor wrote to a different address than your account uses, we email a code there. That address is held in readable form only while the code is valid — 30 minutes — and is deleted as soon as you use it or it expires.
We also log each verification attempt and whether it succeeded, so the system can spot abuse.
We deliberately do not ask for your DS-2019, passport, SEVIS number, or any identity document. Collecting more than we need would be both worse for you and, under GDPR, harder to justify.
Why we’re allowed to do this
Your account and reviews: to provide the service you asked for. Your verification: your consent, which you can withdraw at any time by deleting the verification or your account. Keeping the site free of spam and fake reviews: our legitimate interest in a review site that is worth reading.
How long we keep it
- · Account and reviews: until you delete them.
- · Verification fingerprints: until you delete your account.
- · Subject line: until the employer is added, then deleted.
- · Verification codes and the address they were sent to: 30 minutes.
- · Attempt logs: 12 months.
Who else sees it
Three companies help us run the site and can technically access data in the course of that: Supabase (our database, hosted in Frankfurt, Germany), Vercel (hosting), and Resend(sending the emails above). We don’t sell data, share it with advertisers, or send it to anyone else. There are no analytics or tracking scripts on this site.
Cookies
One, and only when you sign in: a cookie that keeps you signed in. No advertising cookies, no analytics, nothing shared with third parties. That’s why this site has no cookie banner — there’s nothing to ask you about.
Your reviews and your anonymity
Your real name is never published — only your display name. But be aware of something we can’t protect you from: if only a few students worked somewhere in a given season, that employer may be able to work out who wrote a review. Choose a display name that isn’t your full name if that concerns you.
Your rights
Under GDPR you can ask us for a copy of your data, correct it, delete it, object to how we use it, or take it elsewhere. Email the address above. You can also complain to your national data protection authority — in Slovakia, the Úrad na ochranu osobných údajov.
Under 16
SeasonStamp is for people on the J-1 Summer Work Travel programme, which requires university enrolment. Don’t use it if you are under 16.
Changes
If we change what we collect, we’ll change this page and update the date at the top. Anything significant, we’ll tell account holders by email.
See also our terms.