Privacy notice
This site collects student events in Cluj-Napoca. Below is what data we handle, why, and who else sees it. It is not boilerplate: what is written here matches what the system actually does.
The short version, before you start:
- If you are only browsing, we learn essentially nothing about you. No cookies and no tracking between sites — just a page-view counter, with no profiles.
- If you get an account as an organization, we keep your email address — you could not sign in otherwise — and the organization's contact address, so we can tell you what happened to a submission.
- We sell nothing and pass nothing to anyone. Six providers keep the site running; all six are listed below.
- If you want anything deleted, write to contact@mylau.ro and we will delete it. You do not have to give a reason.
The detailed notice
Who handles your data
MYLAU is run by Bokor Előd as a private individual, in Cluj-Napoca. For anything about data, write to contact@mylau.ro.
If you are only reading the site
Then we handle essentially nothing about you. The site sets no cookies and stores nothing in your browser. It carries no Google Analytics, Facebook pixel or any other third-party tracking script, and fonts are served from our own server rather than from Google.
It does run a page-view counter. Vercel, our hosting provider, operates it; the script loads from our own domain and sets no cookies. It records how often a page was opened, roughly where from and on what kind of device — it builds no profile and follows nobody between sites.
We count, per event and per day, how often its page was opened and how often someone followed the organizer's link. That counter holds no IP address, no identifier and nothing anyone could be traced by.
Two things follow from how the site is served, though. Our hosting and database providers log the IP address of requests. And where an event page shows a map, your browser contacts Mapbox's servers directly, so your IP address reaches them too.
If you use the site as an organization
Then we do handle personal data, because without it we could not give you an account or publish anything.
- Your email address — this is how you sign in. We send a sign-in link; we store no passwords.
- When you sign in — this is how we see whether an invited account was ever used.
- The organization's name and contact address — this is where we tell you what happened to a submission.
- The events you upload, images included — these are public, which is the point of publishing them.
On what basis
Account and publishing data are handled to carry out the arrangement between us: you ask for an account and publish events, we make that possible. The notification emails go out on the same basis — the reason an event was refused is part of the service, not advertising.
The visit counter is kept on legitimate interest, so we can see which events readers care about. Since it identifies nobody, that interest conflicts with nobody's privacy.
Who else sees it
We sell nothing and pass nothing to anyone for marketing. We do rely on these providers to run the site:
| Provider | What for |
|---|---|
| Supabase | database and sign-in |
| Vercel | hosting and delivery |
| Brevo | sending notification and sign-in emails |
| Mapbox | showing the map on event pages |
| Google Cloud Translation | machine translation of event text |
| Photon (Komoot) | finding the coordinates of a venue you entered |
How long we keep it
- Your account and the organization's details for as long as the account exists. Ask us to delete it and we will.
- Published event data for as long as it is on the site.
- The visit counter indefinitely — identifying nobody, it is not personal data.
Your rights
You can ask what we hold about you, ask us to correct it if it is wrong, ask us to delete it, and object to it being handled at all. Write to contact@mylau.ro and we will try to answer properly within a month.
If you think we have handled it badly, you can complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro).