DREAM27: 40% off the Season Pass and the Essay PackSee prices
Skip to content
Edlume

Privacy policy

Updated October 10, 2026

In short

No advertising cookies, no selling data. Without an account, your plan stays in your browser. With one, we store it so you can find it on any device. We don't keep your essays after the review.

Controller

Ismael Esqalli (see the legal notice). Contact: contact@edlume.app.

Your application plan

Without an account, your list of universities, your profile and your progress are saved only in your browser (local storage).

When you share the parent link, your list and progress are encoded in the link itself: anyone with the link can see the plan.

Your account

If you create an account, we store your email, your first and last name, your password in hashed form (never in plain text), your plan, your progress and your purchases. If you fill them in, we also keep your target start date, your country, your school system and your first language: they're used to tailor your plan and your reviews, nothing else. This data is hosted by our database provider and is used only to run your account.

A strictly necessary session cookie keeps you signed in. It isn't used to track you.

If you ask to reset your password, your email is passed to our email provider, only to send you the link.

You can download all your data or delete your account at any time from "My account". Deleting it erases everything, for good.

Deadline reminders

With the Season Pass and an account, you can get email reminders before your dates, and have them sent to a parent too. We keep that parent's email and your chosen language only for these reminders, along with the list of reminders already sent so none repeats. The parent gets a first email explaining why, and every email has a one-click unsubscribe link. Removing the parent, or their unsubscribing, erases their email; deleting your account erases the rest.

Your plan by email

At the end of the quiz, you can get your plan's link by email. Your address goes through our email provider for that message. We keep it only if you tick the box to receive our tips and reminders, along with your language and country (derived from your connection); then it's one or two emails a month at most, and you can unsubscribe any time by writing to us.

The free guide excerpt

To download the free excerpt, you enter your email. We keep it only if you tick the box to receive our tips by email, along with your language and country (derived from your connection). In that case we use it only to write to you (one or two emails a month at most), and you can unsubscribe any time by writing to us.

Your essays

When you request a review, your essay and the context you give (school system, first language, target university) are sent to our AI provider, Anthropic (United States), only to produce your review.

Edlume doesn't keep your essay or the review after displaying them. Anthropic doesn't use data sent through its API to train its models and keeps it only for a limited period set out in its commercial terms.

Your latest draft is kept in your browser so you don't lose it when you change pages. Clear the field to delete it. The score of each review (not the text) is kept there too, to show your progress from one draft to the next.

Don't include information you don't want to share (ID numbers, contact details…) in your essay.

Account

Accounts are free and optional. You're responsible for keeping your password private. You can delete your account at any time from "My account".

Payment

Payments are processed by Stripe (Stripe Payments Europe, Ltd., Ireland) under its own privacy policy. Edlume never sees your card number.

After a purchase, Stripe passes us your email address so we can send you your access code through our email provider. We don't keep that address: we only store the code, the offer bought, the number of reviews used and the order's technical IDs at Stripe, for the season and our accounting obligations.

Hosting and audience measurement

The site is hosted by Vercel, which processes technical logs (including IP addresses) for security and operation.

To prevent abuse of the free diagnostic, we count diagnostics per day using a fingerprint of your IP address (hashed with the date and a secret key, never stored in clear, and not linkable from one day to the next).

We measure audience with Vercel Web Analytics, without cookies and without cross-site tracking.

We also count visits (one per visit) and a few steps of the journey (plan created, free limit reached, diagnostic or review finished, click to checkout, purchase, code activated) to see what works in each country. Each step is stored with the country Vercel derives from your connection, the language, the page and the page you first landed on. No IP address, email, name or identifier is attached: these steps can't be linked to you.

Your landing page and the site that sent you are kept in your browser for the visit (session storage, cleared when you close the tab), without cookies. When you buy, this information and your country are passed to Stripe with the order so we know where it came from.

If you arrive through a friend's referral link, a functional cookie (edl_ref) keeps their referral code until November 1, 2026 so the discount applies at checkout. When you buy, the code is passed to Stripe with the order.

A functional session cookie (edl_cc) keeps the country Vercel derives from your connection (two letters, e.g. US), to show what applies where you are. It's deleted when you close your browser and isn't used to track you.

Transfers outside the European Union

Anthropic and Vercel are based in the United States, and Stripe may process some data there. These transfers rely on the European Commission's standard contractual clauses or the Data Privacy Framework, depending on the provider.

Your rights

You can ask to access, correct, delete, export, object to or restrict the processing of your data. Export and deletion take one click in "My account". For anything else: contact@edlume.app.

You can also complain to the French data protection authority, the CNIL (cnil.fr).