What we keep, and what we never had.
Last updated September 16, 2026
Most of this site needs no verification and no account — every public offer is readable without telling us anything at all. This page is about the part where you do verify, and what survives it.
- What a verified student looks like to us
- Two things: which institution issued your address, and an irreversible hash of the address itself. Not the address, not your name, not a photo of anything. The hash is one-way, so we cannot turn it back into your email — which also means we can never email you again.
- The address itself
- Your address exists only inside the single request that sends your code. It is hashed on arrival, used to address one email, and never written to the database. Nothing in our records can be read back as an email address.
- The six-digit code
- Valid for ten minutes, usable once, and abandoned after three wrong guesses. We store a hash of the code rather than the code, so a copy of our database would not let anyone complete a verification with it.
- Your IP address
- Hashed and counted, so that one machine cannot request hundreds of codes. The count expires after twenty minutes. We keep no readable log of who asked for what from where.
- What you redeem
- Taking a gated offer records which offer, at what time, and which institution you verified with. Never who you are. This is how we learn which discounts are worth keeping listed.
- Where you go next
- Opening an offer goes through this site before it reaches the merchant, so the link you follow is ours rather than theirs. That records which offer, when, and which language you were reading it in — nothing about you. On a gated offer it also records the institution you verified with, exactly as above. The merchant is sent a code derived from your verification that is different for every single offer, so no two of them can work out they saw the same person.
- Tapping a tag in a shop
- Some shops have one of our tags beside the till. Tapping it records that somebody arrived at that shop, at that time, in that language — and nothing else. We do not read your verification, so a tap is not connected to you, to your institution or to any other tap you have made, even if you are verified and even if you go on to use an offer. That stays true by design: where you physically were is a different kind of fact from which page you opened, and it is not ours to attach to you. If you then show your verification for an offer, that is recorded exactly as described above and not one field more.
- Cookies
- One cookie, set only after you verify. It is signed, unreadable to scripts in your browser, and carries a pointer to your verification rather than anything about you. There are no advertising or analytics cookies here and no third-party trackers.
- How long any of it lasts
- An email verification is good for 183 days, because an address outlives graduation. The cookie survives sixty days beyond that, purely so we can tell you it lapsed instead of behaving as though you were never here.
- Having it deleted
- Write to hello@fidera.jp. Because we hold no address, we cannot find you from your email alone — tell us your institution and roughly when you verified, and we will remove the matching record.
- Who runs this
- Benri LLC. Questions go to hello@fidera.jp.