Updated September 19, 2026

Privacy and analytics

utransfer is an independent transfer-planning service. We use information to build and save your plan, process purchases, provide support, and understand whether the product is useful.

Your planning and purchase data

Your free draft stays in this tab for up to seven days. At checkout, your selected path and course statuses travel to Stripe as purchase metadata so we can create the plan you bought. Stripe handles payment details. We store your paid plan and email in Supabase and use Resend for transactional email. Vercel hosts the service and processes requests; Upstash helps limit abusive requests. Support messages go to the utransfer team.

The homepage school explorer loads an OpenStreetMap view only when that section enters your browser viewport. OpenStreetMap receives the network information needed to serve map tiles. The map does not receive your plan, email, course history, or purchase data.

What product analytics measures

Google Analytics measures eligible public pages and the preview funnel. PostHog, in the United States, receives selected events such as starting a plan, seeing a preview, completing a verified purchase, opening a paid plan, and saving a progress update. Public events can include the selected college, university and major, a coarse referral category, and approved campaign labels. Purchase events include the amount and currency.

PostHog uses a random identifier, not your email or login ID. A signed first-party cookie lasts up to 90 days. For a new measured purchase, we link that identifier to the plan so a later authorized visit can be counted. This is pseudonymous usage data, not a claim that a person is unidentifiable. The saved link can outlast the browser cookie.

We do not send emails, grades, course histories, course statuses, private plan links, authentication tokens, or payment credentials to PostHog. Events pass through our server; visitor IP addresses and full referrer URLs are not forwarded. We do not enable PostHog session recording, automatic click capture, or person profiles.

Your choices

You can turn off optional analytics below. We also honor browser Do Not Track and Global Privacy Control signals. Disabling analytics leaves planning and checkout available. The setting applies to future requests from this browser; it does not delete already recorded events.

Retention and questions

Paid plans are retained to provide continuing access. Analytics event retention is separate from the 90-day cookie lifetime; cookie expiry does not automatically delete past events. Contact us about access, deletion, or how your information is used. Include your purchase email when asking about a saved plan, and never send card details or passwords.

Provider information: PostHog privacy policy · Google privacy policy · OpenStreetMap Foundation privacy policy.