Privacy Policy — Chaffey AVID Opportunity Directory

Effective Date: September 15, 2026
Last Updated: September 15, 2026
Website Operator: Esteban Alvarez
Contact: esteban.alvarez.ie.ca@gmail.com

1. About this policy

Chaffey AVID Opportunity Directory is an independent student-maintained website operated by Esteban Alvarez, primarily for students seeking educational and career opportunities. It is not an official school or district website.

This policy explains information handling when you browse the Directory, search its listings, or contact its operator. “We,” “us,” and “our” refer to the website operator. Visitors browse listings; they cannot directly publish opportunities on the website.

2. Information you provide

Email messages. If you email esteban.alvarez.ie.ca@gmail.com, we receive your email address, any sender name shown with your message, the message itself, and any attachments you choose to include. We use this information to respond, address questions or reported listing problems, and maintain relevant correspondence. Our contact mailbox uses Gmail, so Google also processes messages through its email service. See Google’s Privacy Policy.

Please do not send passwords, Social Security numbers, banking details, medical records, school records, or other sensitive information. The Directory does not accept applications for listed opportunities, and you should submit application materials only through the provider’s official process.

Admin access. The private editor uses a shared username and password, not personal email accounts. Cloudflare Worker secrets hold the configured login credentials. Our Cloudflare D1 database stores opportunity content, publication status, creation and update times, and the shared admin username associated with edits. Do not include private student information in listings. Published listing content is public; drafts and archived listings are restricted to the admin editor.

Search terms. Homepage searches are sent to the Opportunities page as part of its URL. Search terms can appear in browser history and in technical request information processed by our hosting provider. Do not enter private or sensitive information in the search field.

3. Hosting and technical information

We use Cloudflare to host the website and serve its images. When you visit, Cloudflare processes requests needed to deliver and protect the service. Depending on the service and configuration, this processing may include IP addresses, traffic-routing information, system configuration information, and other technical information about requests to and from the website. Some service information may be available to the operator through Cloudflare’s dashboard or logs.

Cloudflare’s handling of this information is described in its Privacy Policy. That policy does not replace our responsibilities for information handled by this Directory.

The website’s current application code does not create visitor accounts or store opportunity applications. When a visitor explicitly joins the newsletter, the connected D1 database stores their email address, subscription status, the time they subscribed, and the time they gave consent.

4. Cookies and tracking

The public browsing pages do not set application cookies. Signing into the private admin editor sets an essential cookie named __Host-avid_admin to maintain the session for up to eight hours. It is restricted to secure connections and is not accessible to page scripts. The database stores a hash of the session token, its expiration, and a credential-version identifier. Signing out revokes that session. To limit repeated sign-in attempts, the application also stores a secret-salted hash derived from the requesting IP address, an attempt count, and a 15-minute expiration; it does not store the raw IP address in this table. These protections do not require personal email addresses.

The application does not use browser local storage or include advertising trackers or analytics scripts. Hosting-level security and measurement features are separate from that code, and any information they process depends on the hosting configuration.

The application does not change its behavior in response to a browser’s Do Not Track signal. This does not limit any rights you have under applicable privacy law. Browser settings may allow you to restrict cookies or other storage, although doing so can affect services you visit.

5. Newsletter and email choices

The newsletter signup form records an email address only after the visitor checks the consent box and submits the form. We use subscriber email addresses to send updates about scholarships, internships, competitions, and other opportunities. We do not sell subscriber lists or share them with opportunity providers for their marketing.

Typing an address without submitting the form, browsing the site, searching, or emailing us does not enroll a person in newsletter updates. We may respond directly to messages sent to us.

To stop receiving updates, email esteban.alvarez.ie.ca@gmail.com with the subject line “Unsubscribe from Chaffey AVID updates” from the address to be removed. We will mark that address unsubscribed and will not use it for future newsletter updates, subject to any records we need to retain for legal, security, or dispute-resolution purposes.

Before a third-party email delivery service is connected, this policy will be updated to name that service and describe its role in processing subscriber email addresses.

6. Use and disclosure

We use information described in this policy to operate the Directory, deliver requested pages, respond to messages, address reported errors or abuse, protect the service, and comply with applicable legal obligations.

Cloudflare and our email service process information as part of providing their services. We may also disclose relevant information when required by law or valid legal process, when reasonably necessary and legally permitted to address fraud or threats, or at your request.

Sending a contact message does not authorize us to publish it, sell your email address, or give it to opportunity providers for their marketing. If a request calls for sharing your identifiable message with a provider, we will seek your permission unless another disclosure ground described above applies.

7. Retention and security

Contact correspondence is kept for as long as reasonably needed to handle the inquiry, maintain relevant records, resolve disputes, or meet applicable legal obligations. Retention depends on the purpose and circumstances; this policy does not promise an automatic deletion interval. Hosting and email providers may retain technical records and backup copies under their own policies, service settings, and legal requirements.

Admin sessions cease to be valid after eight hours, and sign-in attempt limits expire after 15 minutes. Expired database entries are cleaned up during subsequent sign-in attempts, so expired records may remain until another attempt occurs. Opportunity records, including drafts and archived listings and their editing metadata, remain in the database until the operator deletes them; archiving removes a listing from public view but does not delete its record. Cloudflare backups may retain prior data according to service settings.

No website, email system, or method of storage is completely secure. Avoid sending unnecessary sensitive information. Nothing in this policy excludes security or privacy obligations imposed by law.

8. Your requests

To ask about personal information we hold, request a correction or deletion, or raise a privacy concern, contact esteban.alvarez.ie.ca@gmail.com. We may need to verify your identity using information reasonably appropriate to the request.

We will handle requests in accordance with applicable law. Some records may need to be retained for legal obligations, security, or resolving disputes. This policy does not limit rights available under applicable law or guarantee control over information held independently by third parties.

9. Students and children

The Directory is primarily intended for high-school students and people supporting them. Children under 13 should not submit personal information through the website or its contact channel.

If a parent or guardian believes a child under 13 has provided personal information, please contact us so we can investigate and take appropriate action, including deletion where required. Students should consult a parent, guardian, or trusted adult before disclosing sensitive information to an opportunity provider.

10. External opportunities

Third-party providers operate their own websites and application systems. When you follow an external link or submit information directly to a provider, that provider’s policies and practices apply. Review them before sharing information. A listing is not a guarantee of the provider’s privacy or security practices.

11. Changes and contact

We will update this policy when our practices change and revise the “Last Updated” date. Where required by law, we will provide additional notice or obtain consent. A policy update does not by itself authorize a new use of previously collected information where separate permission is required.

For privacy questions or requests, contact:

Esteban Alvarez
Chaffey AVID Opportunity Directory
esteban.alvarez.ie.ca@gmail.com