Last updated 19 June 2026
Unilume OÜ (Estonia) is the data controller for link. Because link is built for secondary-school students, we treat the data here as belonging to minors and keep it to the minimum the product actually needs.
Account: your email address, and your name and profile picture if you sign in with Google.
Profile: what you enter during onboarding — name, school, interests, roles and levels, strengths, languages — and your CV if you upload one.
Activity: the competitions you save, the teams you join, and the applications and invitations you send or receive.
Technical: basic log data such as IP address and browser, kept to keep the service secure and working.
To run your account and keep you signed in — necessary to perform our contract with you.
To match you to competitions and open team seats, and to show captains why you fit — necessary to perform our contract with you; the match score is a simple, deterministic calculation over your tags and roles, not automated decision-making with legal effect.
To send the one-time codes you need to sign in — necessary to perform our contract with you.
To keep the platform safe for young users, including acting on reports of harassment — our legitimate interest in a safe service.
Other students see the parts of your profile the product is designed to show: your name, school, interests, roles, strengths, and match score. Your email address is not shown to other students.
A team captain you apply to additionally sees your application note and your CV if you have uploaded one.
We do not sell your data, and we do not use it for advertising.
Hosting and database within the EU; Resend for sending sign-in emails; Google for optional sign-in. Each is bound by a data-processing agreement and may use your data only on our instructions.
Data is stored in the European Union. If any processor transfers data outside the EEA, that transfer relies on an adequacy decision or on the European Commission's standard contractual clauses.
We keep your profile while your account exists. Delete your account and we remove your personal data within 30 days, except where we must keep something to meet a legal obligation. Sign-in codes expire within minutes; technical logs are kept for a short period.
Under the GDPR you may ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable form. Email support@unilume.org and we will respond within one month.
If you are unhappy with our answer you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the supervisory authority where you live.
If you are a parent or guardian and believe your child has given us data you would rather they had not, email support@unilume.org and we will delete it.
Questions? Email support@unilume.org.