Privacy Policy
Last updated: 7 September 2026. This policy explains what OPRA Youth Cyprus collects and why — in plain language.
If you subscribe to The OPRA Youth Weekly, we store your email address, selected opportunity interests, deadline-alert preference, subscription status, and the time and place you gave consent. If you submit an opportunity, we store the listing details and your contact email so we can verify it. If you use the contact form, we store your name, email, subject, and message.
For authorized team members, we also process account email addresses, display names, roles, account status, authentication records, and administrative activity needed to secure and operate the console. The public site stores identifiers for opportunities you save in your own browser; these are not attached to a student account.
Like most websites, our hosting and technical providers may process basic request information such as IP address, browser type, timestamps, and security logs when delivering the service. We never buy or sell personal data or share it with advertisers.
We use this information to operate and secure OPRA Youth: delivering newsletters you requested, tailoring them to selected interests, verifying submitted listings, answering messages, managing authorized team access, preventing abuse, and maintaining reliable records. We do not use personal data for advertising or unrelated profiling.
Newsletter messages rely on your consent, which you may withdraw at any time. We process messages and submissions to respond to your request and for our legitimate interest in operating a safe, accurate opportunity platform. Team-account and security records are processed to administer and protect the service. Where applicable law requires consent from a parent or guardian, please involve them before submitting personal information.
We only add you to the newsletter after you explicitly tick the consent box on our signup forms. We record when and where you consented. You can withdraw consent at any moment using the unsubscribe link included in every newsletter email — it works instantly and permanently.
Subscriber email addresses and private contact records are visible only to authorized OPRA Youth owners and administrators. Editorial team members may see aggregate newsletter numbers but not individual subscriber addresses. Opportunity submissions are visible to authorized reviewers because verification requires them.
We use Supabase for database and authentication services, Resend for email delivery, and our website host to serve the site. Pages also request fonts or code assets from Google Fonts, cdnjs, and jsDelivr. These providers may process technical request information and may do so outside Cyprus. Their contractual and technical safeguards apply to that processing.
Saved opportunities are kept in local storage on your device. The team sign-in experience also uses essential browser storage for secure Supabase sessions and a short password-reset cooldown. You can clear this storage using your browser settings, although doing so will remove saved opportunities or sign you out.
Every newsletter contains a one-click unsubscribe link. Unsubscribing makes your subscription inactive in OPRA and Resend. We retain a minimal suppression record so the address is not accidentally re-added. If you later subscribe again, we record your new consent and preferences.
Active subscription information is kept while you remain subscribed. A minimal unsubscribe record is kept while needed to honour your opt-out. Contact messages and rejected submissions are reviewed periodically and retained only while needed for response, verification, safety, or record-keeping. Team and activity records are kept while an account is active and afterward for as long as reasonably needed for platform security and accountability. We may retain information longer where the law requires it.
You may ask to access, correct, or delete personal information we hold about you. You may also withdraw newsletter consent or object to certain processing. Contact us using the details below. We may need to verify that the request relates to you. We aim to complete verified deletion requests within 14 days unless retention is legally required, including removing the relevant information from Supabase and Resend.
For any privacy question, correction, or deletion request, use the contact form or email oprayouthconsole@gmail.com.