Earlier versions of the Terms and Privacy Policy

Terms of Service

Effective and last updated: November 9, 2026

Important: arbitration, class waiver, liability limits

PLEASE READ THESE TERMS CAREFULLY. THEY CONTAIN A BINDING INDIVIDUAL ARBITRATION CLAUSE, A CLASS ACTION AND JURY TRIAL WAIVER, A RELEASE OF CLAIMS, A US$100 LIMIT ON LIABILITY, AND A ONE-YEAR DEADLINE FOR CLAIMS. THEY AFFECT YOUR LEGAL RIGHTS.

• You must send us a written Notice of Dispute and wait 60 days before starting any claim (section 18).
• Disputes are decided by one arbitrator through the American Arbitration Association, one person at a time, with no judge, jury or class action (section 18).
• You can opt out of arbitration within 30 days of first accepting these Terms by emailing [email protected] with the subject "Arbitration opt-out" (section 18).
• Diduno is free. The total liability of everyone who runs or helps Diduno is limited to US$100 (section 15).
• You release the Diduno Parties from claims about other users, meetups, offers and third parties (section 15).
• You meet other people and use offers at your own risk (section 9).
• Claims must be started within one year (section 18).
• Nothing here limits rights the law does not let us limit (section 20).

1. Agreement and definitions

These Terms are a contract between you and Diduno, an unincorporated student project run by its founders ("Diduno", "we", "us"). By signing in to Diduno you accept these Terms and our [Privacy Policy](/privacy) by ticking the agreement box on the sign-in screen, which links to both, mentions the arbitration clause and asks you to confirm you are 18 or older. We record the version you accepted and the time. Accounts created before this version was published are asked to accept it the next time they use Diduno. The text of every version stays available at /terms/archive. If you only browse as a guest, you are not asked to accept section 18 and the arbitration clause does not apply to you, but the other sections are the rules for using the site, your use is subject to them, and any court dispute with a guest is governed by the law and venue in section 17 and section 18. If you do not agree with these Terms, do not use Diduno.

• Service: the Diduno website and web app, including the perk list, Campus Map, Live finds, Forum, favorites, calendar export and chat features.
• You: anyone who visits or uses the Service.
• Account: your profile, created by signing in with a school Microsoft account.
• Your content: finds, Forum posts, replies, votes, corrections, chat messages, your profile and picture, and anything else you submit.
• Third-party offers: perks, discounts, events, places and meetups listed or linked on the Service.
• Diduno Parties: Diduno; its founders, owners, operators, organizers, contributors, volunteers, moderators and administrators; anyone affiliated with or helping run Diduno; any future company, LLC or successor that takes over Diduno; and each of their heirs, successors, assigns and agents. Every protection in these Terms (including the disclaimers, release, liability limits, indemnity, arbitration and dispute provisions) benefits each Diduno Party as an intended third-party beneficiary who may enforce it, and a claim against any Diduno Party is treated as a claim against Diduno under these Terms.
• Succession: Diduno may assign or transfer the Service, these Terms and its data to a future entity (for example an LLC or corporation) by posting an update. The same promises then bind that entity.

2. Who may use Diduno

You must be at least 18 years old and located in the United States. You can browse without an account. To sign in you need a valid Microsoft account issued by a school we support, and you must be authorized to use it. If you use Diduno for an organization, you confirm you can bind it.

3. Independent project

Diduno is an independent student project that started at the Fall 2026 Temple AI Build challenge. It is not affiliated with, sponsored by, endorsed by or operated by Temple University or any other school, Microsoft, GroupMe, Vercel, OpenStreetMap or any offer provider or brand listed. Names and marks belong to their owners and appear only to identify offers. Diduno claims no trademark rights in third-party artwork (see the credits page).

4. Accounts

You must give true information and keep your account to yourself. You are responsible for everything done under your account. Do not create more than one account or use someone else's. Tell us at [email protected] if you think someone else is using your account. We may refuse or end access if your school account is not eligible.

5. What Diduno is

Diduno is a free guide to cheap, discounted and free offers, places, events and student posts. We collect most listings from public sources, automated collection and other students. We are not a seller, an agent, or a party to anything between you and an offer provider or another student. We do not provide, sell or guarantee any offer. Your dealings with merchants, schools, other students or any third party are solely between you and them. Links to third-party sites are for convenience; we do not control or endorse them.

Accuracy. Listings are gathered automatically from public sources and may be wrong, outdated, incomplete or no longer available. Prices, eligibility, hours, dates, locations and links can change at any time. Always check the official source before you rely on a listing or spend money. We are not liable for any loss caused by relying on one.

Fees. Diduno is free. We do not charge, show ads or sell your data today. There are no subscriptions or automatic renewals, so there is nothing to cancel or renew. We may change this by posting an update under section 19. Third parties you deal with may charge you.

6. Your content and our licence

• You keep ownership of your content.
• You give us a worldwide, non-exclusive, royalty-free, sublicensable licence to host, store, copy, display, reformat, distribute and publish your content in and through Diduno, and to use it to run, secure and improve Diduno. This includes the public calendar feed and, in a limited form, messages relayed to GroupMe, where GroupMe's terms also apply. Content on the Live map or Forum is visible to other signed-in students, and to the public where we make it public.
• You give other users the right to view your content within the Service.
• The licence lasts while your content is on Diduno and for a reasonable time after for backups and cached copies. It ends for the live Service when you delete the content or your account, except where others have already copied it or the law requires us to keep it.
• You promise that you own your content or have the right to post it, that it is accurate, and that it does not break these Terms, any law or anyone's rights.
• Feedback you give us may be used by us without obligation to you.

7. Acceptable use

You will not: break the law; harass or threaten anyone; post other people's personal information; spam or scam; impersonate anyone; upload malware; access another person's account; scrape, crawl, harvest or use bots or other automated means to access Diduno (except standard search engine indexing) without our written permission; overload or probe Diduno, or bypass its security, authentication, bans or rate limits; reverse engineer or copy Diduno except as the law allows; use Diduno for commercial advertising or resale; use Diduno in breach of a third party's terms (including Microsoft, GroupMe and OpenStreetMap-based services); or help anyone do these things. The community rules in section 8 apply as well.

8. Community rules

Share real things

• Share finds you saw yourself, at the place you pin, for as long as they last.
• Say honestly what something costs. If you aren't sure, say so.
• End your find or close your post when it's gone or claimed.

Not allowed

• Harassment, hate, threats, or posting someone else's personal information.
• Spam, scams, ads for your business, or links to phishing or malware.
• Selling anything illegal, prescription drugs, alcohol to minors, weapons, or tickets above face value.
• Sexual content, and anything that breaks Temple's student code of conduct or the law.
• Pretending to be someone else, or a Temple office.
• Anything discriminatory, violent or that targets a person; fake or misleading finds, offers or reports; false claims about prices or availability.
• Counterfeit or stolen goods; referral codes or solicitations (links are blocked in chat, finds and posts).
• Content that infringes anyone's intellectual property or privacy, and anything meant to harm, disrupt or overload Diduno.

Flags and bans

Flag anything that breaks these rules. Enough flags hide it until a moderator reviews it. Moderators can remove posts and finds and ban accounts, and a ban follows your school account (your Microsoft identity and school email). We use user flags, votes and manual review. Content may be hidden or removed, and accounts warned or banned, at our discretion, with or without notice.

Meet safely

Pick up giveaways and meet other students in public places on campus. Do not pin or share your home address or room. Diduno doesn't check posts before they appear and isn't part of any trade between students. See section 9.

About the information here

Perks, places and events come from public sources and change often. Always confirm the price and who qualifies on the official page before you sign up or go. Diduno is an independent student project, not affiliated with or endorsed by Temple University.

9. Safety, meetups and other students

Safety when meeting people. Meeting someone you do not know carries real risk. Diduno does not know who people are, does not supervise meetups and is not there. Meet only in public, well-lit places, tell someone where you are going, never go alone to a private place, and leave if you feel unsafe. Do not post or pin your home address or room. You choose whether to meet anyone, and you do so at your own risk.

Offers, places, events, links and posts on Diduno come from third parties or other users. We do not endorse, verify or guarantee any of them, and we are not responsible for them. We do not run background checks and do not screen posts before they appear, so we cannot verify what people post.

• Use your own judgment. Meet in public, well-lit places, tell someone where you are going, and leave if you feel unsafe.
• Do not give out financial details, passwords or other sensitive information.
• Be careful with food, goods or items offered by others. We do not inspect them and make no promise about their safety, quality, allergens or legality.
• Finds and posts may be wrong, expired or already gone. Do not travel only because of one.
• In an emergency call 911 or campus safety. Report abuse to [email protected].
• Meeting people, collecting food or goods, or going to places is at your own risk. To the extent the law allows, you knowingly and voluntarily assume all risks of doing so, including the risk of injury, illness, theft, harassment, property damage and death, whether or not foreseeable, and you are solely responsible for your interactions with other users. See also the release in section 15.

10. Our role in user content

Diduno is an interactive computer service (47 U.S.C. 230). We host content posted by users, and the law treats us as neither its publisher nor its speaker. Listings, descriptions and place information that we gather or write ourselves are ours and carry the accuracy disclaimers in section 5. We may, but are not required to, review, hide or remove content and suspend accounts, at our discretion and without notice.

Intimate images. If an intimate image of you was posted without your consent (including a computer-made one), email [email protected] with the page address and the subject "Image removal". We will remove it promptly after a valid request, and in any case within the time the federal TAKE IT DOWN Act requires, and look for copies on Diduno. We aim to check [email protected] every day and commit to remove a valid intimate-image report within 48 hours.

11. Our intellectual property

Diduno's software, design, compilation of offers, and the Diduno name and logo are owned by us or our licensors. We give you a limited, revocable, non-transferable licence to use Diduno for personal, non-commercial use. All rights not granted are reserved. Third-party names, logos and data belong to their owners. Map data is from OpenStreetMap contributors and OpenFreeMap. Other credits are on the credits page.

12. Copyright and takedowns

We respond to notices of copyright infringement under the Digital Millennium Copyright Act (17 U.S.C. 512). To report infringing content, or to dispute a removal, follow the process at /dmca. Our designated agent is the Diduno Copyright Agent, email [email protected]. We may remove content and end the accounts of repeat infringers.

13. Termination

You may stop using Diduno or delete your account in Settings at any time. We may suspend, restrict or end your access, remove content, or ban your account at any time, for any reason or no reason, without notice or liability. Reasons include breach of these Terms or the community rules, risk to others or to Diduno, legal requirements, or ending or changing the service. A ban follows your school account. After termination, sections that by nature should continue will continue, including 6 (licence for backups, copies and content already shared), 9 to 12 and 14 to 20. Some moderation records are kept as described in the Privacy Policy.

14. Disclaimer of warranties

DIDUNO, ALL CONTENT AND ALL THIRD-PARTY OFFERS ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, AVAILABILITY AND SECURITY. WE DO NOT PROMISE THAT DIDUNO WILL BE UNINTERRUPTED, ERROR-FREE, SECURE OR FREE OF HARMFUL COMPONENTS, OR THAT ANY OFFER, FIND, POST, LISTING, PRICE, EVENT, PLACE, LOCATION OR USER IS ACCURATE, CURRENT, AS DESCRIBED OR SAFE. WE DO NOT ENDORSE ANY OFFER, PROVIDER OR USER. Nothing on Diduno is legal, financial, medical or other professional advice. Some places do not allow some of these exclusions, so they may not apply to you in full; then they apply to the extent the law permits. See also the Disclaimer.

15. Limitation of liability and release

TO THE MAXIMUM EXTENT THE LAW ALLOWS:

• Cap. THE TOTAL LIABILITY OF ALL DIDUNO PARTIES TOGETHER FOR ALL CLAIMS OF ANY KIND RELATED TO DIDUNO WILL NOT EXCEED ONE HUNDRED US DOLLARS (US$100). Diduno is free, so this is the most we can fairly be expected to owe. The cap applies to every legal theory, including contract, tort (including negligence), statute and strict liability.
• No indirect damages. NO DIDUNO PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, DATA, GOODWILL OR OPPORTUNITIES, EVEN IF TOLD THEY COULD HAPPEN.
• Other users and third parties. NO DIDUNO PARTY IS LIABLE FOR THE CONDUCT OF ANY USER OR THIRD PARTY, FOR USER CONTENT, OR FOR ANY PERSONAL INJURY, ILLNESS, DEATH, PROPERTY DAMAGE, THEFT OR OTHER LOSS ARISING FROM OFFERS, EVENTS, PLACES, MEETUPS, FOOD, GOODS, SAFETY INCIDENTS OR OTHER USERS.
• Release. YOU RELEASE THE DIDUNO PARTIES FROM ALL CLAIMS, DEMANDS AND DAMAGES, KNOWN OR UNKNOWN, ARISING FROM OTHER USERS' CONDUCT, MEETUPS, OFFERS, THIRD PARTIES AND CONTENT, INCLUDING CLAIMS BASED ON THE ORDINARY NEGLIGENCE OF A DIDUNO PARTY, TO THE EXTENT PENNSYLVANIA LAW PERMITS. If you live in California, you waive California Civil Code section 1542, which says: a general release does not extend to claims the creditor or releasing party does not know or suspect to exist in their favor at the time of executing the release and that, if known, would have materially affected the settlement. You waive similar laws of any other state.
• Independent limits. Each limit in this section is separate and survives even if another limit fails of its essential purpose.
• What is not limited. This section does not limit liability for gross negligence or willful misconduct to the extent the law does not allow that, or any other liability the law does not allow to be limited.

16. Indemnity

You will defend, indemnify and hold harmless every Diduno Party from claims, losses, damages, liabilities, fines, penalties, settlements, costs and attorney's fees arising from your content, your conduct, your breach of these Terms or the community rules, your violation of law or anyone's rights, or a dispute between you and another user. We may take over the defense of any matter at your cost. This does not apply to the extent a claim is caused by a Diduno Party's own gross negligence or willful misconduct.

17. Governing law and venue

Pennsylvania law governs these Terms and all disputes about Diduno, without regard to conflict-of-laws rules, except that the Federal Arbitration Act governs section 18. For anything that is not arbitrated, you and we submit to the exclusive jurisdiction of the state courts in Philadelphia County, Pennsylvania, or the U.S. District Court for the Eastern District of Pennsylvania, and you waive any objection to that venue or that it is an inconvenient forum.

18. Disputes: notice, arbitration and class action waiver

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS, INCLUDING YOUR RIGHT TO GO TO COURT AND TO HAVE A JURY. In this section "dispute" means any claim or disagreement between you and any Diduno Party arising out of or relating to these Terms or Diduno, whenever it arose.

• Step 1: Notice of Dispute and 60 days to resolve. Before starting any arbitration or court case, you must send a written Notice of Dispute by email to [email protected] (and by mail to the postal address we will give within 5 business days of an emailed request). It must include your name and account email, the facts, the specific relief and amount you seek, and your personal signature. For 60 days after we receive a complete notice the parties will try in good faith to resolve it, and no one may file a case until that period ends. The time limit in this section is paused during those 60 days. We may send you a notice the same way. We do not accept service of process by email unless we confirm in writing.
• Step 2: Binding individual arbitration. Except for the exceptions below, any dispute will be resolved by final and binding individual arbitration, not in court, with no judge or jury. The American Arbitration Association (AAA) will run it under its Consumer Arbitration Rules, available at adr.org, before one arbitrator. It will be by video or on documents unless the arbitrator finds a live hearing necessary. The arbitrator applies the law and may award only the individual relief a court could. Diduno pays the AAA filing, administrative and arbitrator fees to the extent the AAA Consumer Fee Schedule assigns them to the business. Each side bears its own lawyers and experts, except as the AAA rules or law require or as section 18 says below. The arbitrator decides questions of arbitrability and enforceability, except that a court decides whether the class waiver and the batching rule apply. The award is final, and judgment may be entered in any court with jurisdiction. To the extent the law allows, the arbitration is confidential.
• Class, group and jury waiver. TO THE EXTENT THE LAW ALLOWS, YOU AND WE MAY BRING CLAIMS ONLY ON AN INDIVIDUAL BASIS, AND NOT AS A PLAINTIFF OR MEMBER IN ANY CLASS, COLLECTIVE, CONSOLIDATED, REPRESENTATIVE OR PRIVATE-ATTORNEY-GENERAL ACTION. EACH OF US WAIVES THE RIGHT TO A JURY TRIAL. The arbitrator may not combine claims or award class-wide relief. If this waiver is found unenforceable as to a claim, that claim proceeds in court (not in arbitration) in the venue in section 17, without a jury, and the rest of this section still applies to all other claims.
• Many similar claims. If 25 or more substantially similar claims are filed by the same lawyers or coordinated lawyers, they are handled in batches of at most 10 claims, starting with a test group of 5 chosen by each side. Fees are due only for the current batch, and the other claims are paused and their time limits tolled until their batch begins.
• Exceptions. Either side may (a) bring an individual claim in small-claims court in Philadelphia County, or in your county of residence, if it qualifies and stays individual, (b) ask a court for an order to stop infringement or misuse of intellectual property or misuse of Diduno, and (c) bring claims the law does not allow to be arbitrated.
• Opt out within 30 days. You may opt out of arbitration by emailing [email protected] from your account email within 30 days after you first accept these Terms, with the subject "Arbitration opt-out", your name and your account email. Opting out of arbitration does not opt you out of anything else in these Terms. If you opt out, disputes go to the courts in section 17.
• One-year deadline. To the extent the law allows, any claim must be started (by sending a complete Notice of Dispute) within one year after it arose, or it is barred forever.
• Fee shifting. If you start an arbitration or lawsuit on a claim that is subject to this section or released in section 15, or on a claim a tribunal finds frivolous or brought in bad faith, you will pay the Diduno Parties' reasonable attorney's fees and costs to the extent the law permits. The AAA rules on fees also apply.
• Changes. If we change this section, the change does not apply to disputes already begun, and you may opt out of the changed section by emailing us within 30 days after we post it, in the same way as the opt-out above.
• Survival and severability. This section survives termination. If any part of it other than the class waiver is found unenforceable, that part is removed and the rest stays in effect.

19. Changes to the service or these Terms

We may change, suspend or end any part of Diduno at any time. We may change these Terms by posting a new version with a new date. Material changes take effect 14 days after posting, or sooner if needed to follow the law or protect safety or security. If you keep using Diduno after a change, you accept the new Terms. If a change is material, we will ask you to accept the new version before you can keep using your account (you can decline and sign out), and each version stays available at /terms/archive. If you do not agree, stop using Diduno and delete your account. Changes do not apply to disputes already begun.

20. General

• Whole agreement: these Terms and the Privacy Policy are the whole agreement between you and us about Diduno.
• Severability: if a part is found unenforceable, the rest stays in effect, and that part is enforced to the maximum extent allowed.
• No waiver: our not enforcing a right is not giving it up.
• Assignment: you may not assign these Terms. Diduno may assign them, for example to a company that takes over Diduno.
• No partnership: nothing here creates a partnership, employment or agency.
• Events beyond our control: we are not liable for events beyond our reasonable control (force majeure).
• Notices: we give notice by posting on Diduno. For a notice about your own account we may also write to the school email address on it. You give notice to us by email to [email protected].
• United States only: Diduno is controlled from the United States and is not intended for use elsewhere. You must follow export control and sanctions laws.
• Third parties: no one else has rights under these Terms, except the Diduno Parties.
• Interpretation: headings are for convenience only, and these Terms are not read against us as the drafter.
• Your legal rights: nothing in these Terms takes away rights you have under law that cannot be waived, and where a limit here is not allowed for you, it applies to the greatest extent the law permits.

21. Contact

Questions, reports, ban appeals, copyright notices, Notices of Dispute and other legal notices: [email protected] (our only mailbox). We aim to answer within 10 business days. We have no published postal address; we give one for formal notices within 5 business days of an emailed request. See the Privacy Policy for how we handle data, the Cookie and Storage Policy, Your Privacy Choices, the Disclaimer and the Accessibility Statement.

Effective and last updated: November 9, 2026

Privacy Policy

1. Who we are

Diduno is run by Diduno, an unincorporated student project run by its founders (the "Operator"). "We", "us" and "Diduno" mean the Operator. If Diduno later becomes a company, LLC or other entity, this policy and your data pass to that successor, which is bound by the same promises (see section 14). We publish no postal address; contact us by email.

Diduno is a free website and web app that gathers discounts and free offers for people with a school (.edu) Microsoft account. It started at the Fall 2026 Temple AI Build challenge. It is an independent student project. It is not run by, affiliated with, sponsored by, or endorsed by Temple University or any other school.

This policy covers the Diduno website and app (the "Service"). It explains what personal information we collect, why, who we share it with, how long we keep it, and your choices.

Contact for everything in this policy: [email protected]. This is our only mailbox.

Diduno is free. We have no ads, no affiliate income and no payments.

2. Who can use Diduno

Diduno is for adults aged 18 or older in the United States. You can browse without an account. To sign in you need a Microsoft account from an allowed school.

We do not knowingly collect data from anyone under 18, and Diduno is not directed to children under 13 (COPPA). If you believe a person under 18 has an account, email [email protected] and we will delete it. Diduno does not verify age. The only checks are the box you tick at sign-in and the requirement of a school Microsoft account, so a person under 18 could still sign in. Diduno is not offered outside the United States and we do not design it for visitors elsewhere.

3. What we collect

3.1 Without an account

• Choices in your browser. Campus, theme, list or calendar view, menu state, saved favorites (as a guest), perk page settings. These stay in your browser's local storage. We never receive them. Clearing your browser data removes them.
• Perk counters. When you open a perk, follow its link or save it, we add one to a per-day count for that perk. The count has no name, account, device or IP address.
• Corrections. If you send a "Wrong info?" correction, we keep the text you type. Guests may send them.
• Page views. Vercel Web Analytics counts page views. Our code sets no analytics cookie, and according to Vercel's published documentation (vercel.com/docs/analytics/privacy-policy) the product sets none either: it does not use cookies to identify visitors, it identifies a visitor by a hash created from the incoming request, it discards that visitor session after 24 hours, and it records page views anonymously, not tied to an individual or IP address. Vercel receives the page address and your browser type. Anything else Vercel records, and for how long, is set by Vercel. You can turn analytics off at /privacy/choices.
• Server logs. Our host, Vercel, receives every request, including your IP address and browser details, as part of normal hosting.

3.2 When you sign in with your school Microsoft account

Sign-in uses Microsoft Entra ID. We receive and store:

• your name and school email address. The name is refreshed from Microsoft at each sign-in;
• your profile picture, if your school account has one. We fetch it from Microsoft when you sign in and copy it into our database only when your account is first created (up to 200 KB). You can replace or remove it;
• Microsoft's hidden account id (`oid`) and school (tenant) id (`tid`). These are never shown to other students. Diduno admins can see them, along with your name, email, handle and last sign-in, in the moderation tools. We use them to enforce bans and to confirm your school is allowed;
• your department, if your school lists one in Microsoft. We read it from Microsoft Graph at sign-in, and the request asks only for the department field;
• when you joined and when you last signed in;
• a record of your agreement: your school email, hidden account id, the version of the Terms and Privacy Policy you accepted at sign-in, and the time;
• a profile address (/u/<handle>) made from your email at first sign-in. You cannot change it. Profiles are visible to signed-in students only, and show your name, picture and school email;
• a session record: a session token and its expiry date. The session cookie is httpOnly.

We never see or store your Microsoft password. We do not keep Microsoft access, ID or refresh tokens after sign-in. We do not read your mail, files, calendar or contacts.

3.3 What you add and post

• Profile details you choose to enter: home campus, major, minor, school or college, graduation year, theme, and whether other signed-in students can see your saved items. That last setting is on by default, so other signed-in students can see what you save until you turn it off in Settings. What you save can say something about you, such as which offers you use.
• Finds ("Share a find"): title, description, category, cost, place, exact map pin and times. Signed-in students see your name, picture and handle. Everyone else sees "A Temple student". Finds may show on the Live map.
• Find votes and flags (Still there, Gone, Flag): stored with your account, one per find. Others see totals only.
• Forum posts and replies: your text, categories, cost, place and pin, meetup times, claims, and close and flag status. Signed-in students see you as the author. Guests do not. Meetups also appear in a public calendar feed on the Events page without your name.
• Saved items (perks, places, events, posts): shown to other signed-in students on your profile by default. You can hide them in Settings.
• Chat messages: if you send a message in the student chats on Home, a Diduno bot posts it to a GroupMe group under your first name and last initial followed by "(via Diduno)". Links are blocked. Messages in that group are visible to its members. We also read recent messages from the group to display them, showing first names, text and images. Other members of the group may not expect that. If you are in the group and want your messages removed from Diduno, email us.
• Moderation records. If your post or find is hidden after other students flag it, or an admin bans or unbans your account, we keep a record tied to your Microsoft account id and school email, with the reason. It is never shown to other users.

Anything you post can be copied or screenshotted by others, and we cannot control that.

3.4 Location

Finds and posts ask for a place. If you use "use my location", your browser asks for permission and we receive your coordinates for that submission. We use them to place the find or post and, where needed, to look up the nearest address. The coordinates you submit are stored with the find or post and shown on the map. You can decline the browser prompt and type a place instead. We do not track your location in the background and we do not store it unless you post it.

3.5 Rate-limit data

To stop spam we count recent actions per IP address (for address search, site search, resolving favorites and perk tracking, and for corrections sent as a guest) or per account (for signed-in writes, corrections and data exports) in a short-lived store at Upstash. Counts expire within 24 hours. If Upstash is down, a temporary in-memory counter on our server is used instead.

3.6 What we do not collect

No payment data, health data, biometrics, government ids or advertising identifiers. We do not store IP addresses or browser details in our database, although our host and the providers in section 5 receive them. We use no advertising or cross-site tracking.

4. Cookies and browser storage

• Cookies: only Auth.js sign-in cookies (session, CSRF, callback address, and short-lived sign-in state values). They are strictly necessary for signing in. If you never start signing in, we set none.
• Local storage and session storage: your display choices and guest favorites, listed above, plus a flag that stops us counting the same perk view twice in one session, and your analytics choice (diduno-analytics-off). The full list is in our Cookie and Storage Policy.
• Service worker (production): caches static files and public pages (home, campus, perks, events, forum, help, privacy, terms) so Diduno loads faster and works offline. It never caches API responses or personal pages. A cached copy of this page may be slightly out of date.

Because we use no non-essential cookies, there is no cookie banner.

5. How we use your data, and who else sees it

We use your data to give you the service you asked for (account, posts, saves, map, calendar export), to show your name, picture and handle on what you post, to keep the community safe (moderation, rate limits, flags, enforcing our Terms), to understand how Diduno is used (anonymous page views and perk counts), to respond to your messages, and to meet legal duties. We do not use your data for advertising, profiling, or automated decisions that have legal effect.

We do not sell or rent data to anyone. We use these services to run Diduno:

Vercel, Neon and Upstash process data for us under their own standard terms and data-processing terms. We use them only to run Diduno and do not allow them to use the data for their own advertising.

5.1 Direct connections from your browser

These two services load directly in your browser, so they see your IP address and basic browser details. Your browser also tells them which page you came from (the Diduno address), as every web request does. We send them nothing else on purpose, and we cannot control what they log:

• OpenFreeMap (tiles.openfreemap.org) serves the map. It sees your IP address and which part of the map you view.
• GroupMe (i.groupme.com) serves images in the student chats. It sees your IP address when those images load.

Microsoft also sees your IP address and sign-in activity when you are sent to its sign-in page. If you click an "add to calendar" link, Google Calendar or Outlook opens with that event's details, and that service's own policy applies. We send them nothing unless you click.

5.2 Public data we collect

Perk, place and event listings come from public sources (Temple's public events API, Wikipedia, two perk websites and public GitHub lists). That collection happens on our servers and involves no information about you.

5.3 Other disclosures

We may share data with other signed-in students as described above, if the law requires it (a valid subpoena or court order), to protect rights, safety and security, or to enforce our Terms. If Diduno is transferred to a future entity, such as a company or LLC formed by its founders, or to another successor, your data moves with it and this policy continues to apply.

6. How long we keep it

How we decide. We keep data while it is needed to run your account and the Service, then delete it as shown above. Where no automatic deletion exists, we delete when you ask or when you delete your account. The review periods above are operating commitments: we review the records they cover at least once a year.

Moderation records. If your post or find is hidden after enough flags from other students, or an admin bans or unbans your account, we record your hidden Microsoft account id, your school email, the action and the reason (a ban or unban reason also names the admin). An admin who only deletes a post does not create one. We keep this record after you delete your account, for the period in the table above. We do this for safety and to prevent ban evasion: without it, a banned person could sign up again. It is visible to Diduno admins only. If you were never moderated, no such record exists. Records of agreement. We also keep the record of the Terms version you accepted at sign-in (your school email, hidden account id, version and time) after you delete your account, for the same period. We keep it to show, if there is a dispute, what you agreed to and when. It is visible to Diduno admins only.

7. Your choices and rights

Anyone can ask us about their data. Residents of states with privacy laws (listed in section 7.3) have the rights below. Diduno is a small free service and may not meet every legal threshold, but we give these rights to all users in the United States. You can also read the plain-language guide at /privacy/requests.

7.1 For everyone

• Delete your account: use Delete account in Settings, or email us. This deletes your profile, picture, finds, votes, Forum posts, replies, claims, flags, saved items and sessions. The moderation record and the record of agreement described above are kept.
• Edit your profile, studies and posts in the app, hide your saved items from others, and remove your own posts.
• Decline location, clear local storage and cookies, or sign out at any time.

7.2 Access, correction and portability

You may ask what we hold about you and for a copy. Most of it is visible in your profile and Settings. You can correct your profile and posts in the app, or email us.

You can download a copy of your account data as a JSON file from Settings. It is served at /api/account/export and works only while you are signed in, up to 3 times an hour. It covers your account row, finds, find votes, Forum posts, replies and flags, saved items and corrections. It leaves out moderation records and sign-in sessions. If you want something it does not include, email [email protected] and we will answer within 45 days.

7.3 State privacy details (California and other states)

Notice at collection (California and all states). This table shows what we collected in the last 12 months. It also shows where it came from, why we use it, and who receives it. Retention is in section 6. We draw no inferences about you from it.

We disclose these only to the service providers named in section 5, to other users as described in section 3, and as in section 5.3. We do not sell or share personal information, and we have not in the last 12 months. We do not use sensitive personal information to infer characteristics about you, so there is no right to limit to exercise (the right exists in California and we honor it by not using the data for anything else).

Your rights. Depending on your state, you have the right to: know and access your data; correct it; delete it; get a portable copy; opt out of the sale of personal data, targeted advertising and profiling; and appeal our decision. We give all of these rights to every user in the United States. Where a state asks for it, we also tell you which specific providers receive your data: they are listed in section 5. You will not be treated worse, charged more or given worse service for using a right. We offer no financial incentive for giving us data.

Where these state laws apply. California (CCPA and CPRA), Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Montana, Texas, Oregon, Delaware, New Jersey, New Hampshire, Kentucky, Nebraska, Maryland, Minnesota and Rhode Island have comprehensive privacy laws. Diduno is small and free, and may fall below some thresholds, but we apply these rights everywhere in the United States.

Sensitive data and consent. Precise location is sensitive data in some states. We ask only when you choose to share a pin yourself, either with "use my location" (your browser shows its own permission prompt) or by choosing a spot on the map or typing a place. By posting a find or Forum post with a pin, you agree that we may store it and show it to others as described above, exactly as you submitted it. Please do not pin your home or room. You can refuse the browser prompt and type a general place, such as a building, instead. We do not process sensitive data in any other way. Withdraw consent by deleting the post or your account.

How to ask. Use the controls described at /privacy/requests, or email [email protected] from your school email address so we can check it is you. You may use an authorized agent with your written permission. We answer within 45 days. If we need more time the law allows one extension of up to 45 days, and we will tell you why. We act on an opt-out request within 15 business days. We charge no fee, except that we may charge a reasonable fee for a request that is manifestly excessive. We verify your identity through your school account email.

Appeal. If we decline a request, reply to our answer and ask for an appeal within 60 days of our answer. A person who did not make the first decision will review it where possible, and we answer in writing within 45 days. If you are still unhappy, you may contact your state attorney general. In Pennsylvania this is the Office of Attorney General, Bureau of Consumer Protection.

7.4 Global Privacy Control and analytics opt-out

You can turn Vercel Web Analytics off for your browser at /privacy/choices. Diduno also reads the Global Privacy Control signal (navigator.globalPrivacyControl). If your browser sends it, we treat it as a request to opt out of analytics, and as a valid opt-out of sale or sharing in the states that require us to honor it. If you turn analytics off yourself, that choice is saved in your browser's local storage (diduno-analytics-off), so it applies to that browser and device. The Global Privacy Control signal itself is read on each visit and is not stored. Clear your browser data and you must set it again. Because we do not sell or share data, the signal changes nothing else.

7.5 Other notes

• De-identified data. We keep perk counters in a form that does not identify you. We do not try to re-identify them.
• Health data. We do not collect consumer health data, and no automated decision with legal effect is made about you.
• Education records. Diduno is not a school and does not receive your school's education records. Education details in your profile come from you and from the Microsoft department field.
• Policy accessibility. This policy is plain text on the web. If you need it in another format, email us.

8. We do not sell or share your data

We do not sell personal information. We do not "share" it for cross-context behavioral advertising. We do not do targeted advertising. This covers the opt-out rights in California, Nevada and other states.

• Nevada: we do not sell covered information as Nevada law defines it (SB 220). You may still send an opt-out request to [email protected] with the subject "Nevada opt-out", and we will answer within 60 days.
• California Shine the Light: we do not disclose personal information to third parties for their direct marketing. California residents may ask us to confirm this at [email protected].
• California minors: Diduno is for adults only, so the California rules for removing content posted by minors do not apply.

9. Do Not Track

There is no common standard for Do Not Track signals, and we do not change behavior because of the Do Not Track header. We do not track you across other sites. Map and chat-image providers can see your IP address when your browser loads from them, as described in section 5.1. We do honor Global Privacy Control (section 7.4).

10. Security

What is in place: encrypted connections (HTTPS with HSTS), a Content Security Policy, frame blocking, no-sniff and referrer headers, and a restricted browser permissions policy. Session cookies are httpOnly. Write requests are checked for same origin. We apply per-IP and per-user rate limits and ban checks. We store no passwords and no Microsoft tokens. Uploaded pictures are limited to PNG, JPEG or WebP under 200 KB and checked by file signature. Admin tools are limited to named admin accounts. Data is stored in managed databases. No system is perfectly secure, and we cannot guarantee protection.

Breach notification. If a security incident exposes your personal data, we will tell affected users and, where the law requires, the relevant authorities, without unreasonable delay and within the time the law sets. We will do this by a notice on Diduno and, where the law requires individual notice, in writing to the school email address on your account. Diduno sends no newsletters, marketing or other automated email.

11. Children

Diduno is for people 18 and over. We do not knowingly collect data from anyone younger. See section 2.

12. International use

Diduno is for the United States. Our providers store data in the United States or as set by their own settings, which we have not independently verified. If you use Diduno from elsewhere, you do so on your own initiative and your data will be handled in the United States.

13. Third-party links

Perks link to external sites, and events or places may link out. Those sites have their own privacy practices and we are not responsible for them.

14. Changes to this policy

We review this policy at least once every 12 months. We will update this page and its date. For material changes we will show a notice in Diduno before they take effect, at least 14 days before where practical. If you keep using Diduno after a change, the new policy applies. If Diduno is transferred to a company, LLC or other successor, we may transfer your data to it, and it must honor this policy. We will post a notice of that transfer.

15. Contact

Email: [email protected] (privacy requests, complaints, legal notices, abuse reports). This is our only mailbox. Operator: Diduno, an unincorporated student project run by its founders. We publish no postal address. If you need one for a formal notice, email us and we give a postal address within 5 business days. We do not accept service of process by email unless we confirm in writing. Data Protection Officer: none appointed (not required for a US-only service). Email: Diduno sends no marketing email, texts or newsletters. We write from [email protected] only to answer you, so CAN-SPAM marketing rules do not apply.

16. Complaints, disputes and our limits

Diduno does not sell or share personal information, does not run targeted advertising, does not profile people using sensitive data, and is for adults aged 18 or older only. Privacy complaints and any claim about how we handle your data are subject to the dispute provisions of the Terms of Service, including the notice of dispute, arbitration, class action waiver and limits on liability. Those provisions protect Diduno and every "Diduno Party" as the Terms define that term (Diduno, its founders, owners, operators, volunteers, moderators and administrators, any future company or successor, and their agents). Nothing here limits rights the law does not allow us to limit. Rights under state privacy laws can be used through section 7 whatever the Terms say.

Effective and last updated: November 9, 2026