Privacy notice

What Opportune collects, why, who handles it, and how to control it.

Who we are

Opportune is a free website for students, run by a small independent team. For any privacy question or request, write to opportune.students@gmail.com.

Opportune is an independent directory. It is not run by, affiliated with, or endorsed by Bohol Island State University or by any organizer or provider listed on it.

Browsing without an account

You can browse every listing and open official links without an account. If you pick a course and interests on Discover, they are sent to our server only to sort listings for that one request. They are not saved, logged, or put in the page address, and they disappear when you reload the page.

When you open an official link, you leave Opportune. We add nothing to the link that identifies you, and the organizer's or provider's own privacy policy applies on their site.

If you create an account

What an account stores
WhatWhyHow long
Email addressTo send one-time sign-in codes and keep you signed in. There is no password.Until you delete your account
Your age statementAccounts are for adults. We record that you said “I confirm that I am 18 years old or older.”, when, and which wording you saw. We never ask for a birth date or ID, and we do not verify age.Until you delete your account
Saved listingsSo you can find them again. Only you can see them.Until you remove them or delete your account
Course and interests (optional)Only if you tick the separate box “Save my course and interests to personalize my recommendations. I can withdraw consent and delete these preferences in Settings.” We use them only to sort listings for you.Until you withdraw consent, which deletes them at once
Consent recordsWhen you agreed or withdrew, and the wording version. They never contain your course or interests.Until you delete your account

We do not collect student ID photos or numbers, grades, phone numbers, or home addresses. We do not send marketing emails, sell personal information, or share your saved listings with organizers or providers.

If you use the contact form

We keep the email address and message you send so we can reply. Only our team can read them. We do not add you to any list, and we delete each message 180 days after it arrives.

Why we are allowed to use it

Proposed legal bases under the Data Privacy Act of 2012, to be confirmed by counsel:

  • Your email, age statement, and saved listings: needed to provide the account you asked for.
  • Your course and interests: your consent. The law treats education and age as sensitive personal information, so this is always a separate, optional choice, and you can withdraw it at any time.
  • Security and error logs, and deletion records: our legitimate interest in keeping the service safe and honoring deletions.
  • Contact form messages: our legitimate interest in answering the questions you send us.

Who handles your data for us

  • Supabase stores the database and runs sign-in, on servers in Southeast Asia.
  • Vercel hosts the website. Its request logs can include your IP address and browser type. Vercel Web Analytics also counts page visits without cookies: it gets the page address (without search text), the referring site, and your browser, device type, and country, and does not keep your IP address.
  • Google (Gmail) sends the sign-in code emails during testing. This will move to an address on Opportune's own domain before launch.

These companies process data only to run Opportune. Some of their servers are outside the Philippines, so your data may be transferred abroad under their safeguards.

Logs and security

Our own server logs record which page or API was requested, the result, how long it took, and a request number. They never contain your email, course, interests, sign-in codes, or what you searched for. We aim to keep logs for no more than 14 days.

Each account can read and change only its own records, enforced in the database itself. Sign-in cookies cannot be read by page scripts and are sent only over secure connections.

Deleting your account

In Settings, you can delete your whole account after confirming with a new code sent to your email. Your sign-in, saved listings, course and interests, and consent records are deleted at once, and you get a reference for the deletion.

We keep only that reference, the date, and a one-way code made from your account number, not your email, so we can delete the account again if we ever restore an older backup. We remove these records after 90 days. Copies in our database provider's backups can remain until those backups expire.

Your rights

Under the Data Privacy Act you can ask to be informed about, access, correct, object to, or erase your personal data, get a copy of it, and claim damages if it is misused. Most of this you can do yourself in Settings. For anything else, write to opportune.students@gmail.com. You can also complain to the National Privacy Commission (privacy.gov.ph).

Accounts are for adults

You can browse Opportune at any age, but accounts are for people 18 and older. If we learn that an account belongs to someone younger, we will delete it.

Changes to this notice

If we change what we collect or why, we will update this page and its date before the change takes effect. See also the Cookie notice and Terms of use.