Privacy policy

• Account: name, email, country, an optional phone number, and a password. Passwords are stored as a one-way hash, so nobody at Passage can read them.
• Applications: everything you enter in an application form: full name, email, phone, country, date of birth, school or university, your statement and an optional link.
• Hosts: organisation name, type, country, website, description and the name and email of the contact person.
• Messages: what you write in the contact form, plus any phone or messenger contact you add.
• Cookies: one session cookie that keeps you signed in. We do not use advertising or analytics cookies.

• to run accounts and let you apply for, or publish, grants;
• to pass applications to the host's selection panel;
• to review hosts and grants before they go live;
• to answer your messages and to prevent abuse.

Applications are held until the grant's deadline. After that they go to the host's selection panel, which uses them to choose and contact students. We do not sell personal data.

Our team receives new applications, host registrations and contact messages through private Telegram chats, so Telegram processes that content under its own terms. The site runs on Vercel and stores data in a Neon Postgres database.

We keep application data while a selection is running and for as long as the host needs it to contact selected students. You can ask us to delete your account and applications at any time.

You can ask to see the data we hold about you, correct it, delete it, or object to how we use it. Write to the contact form and we will act on the request.

Many grants are for school students. If you are under 18, tell a parent or guardian before you apply. A host may ask for their consent before awarding a place.

If we change this policy we will update the date at the top of the page.