Privacy Policy

Last updated: May 9, 2026

1. Introduction

Oppdragsportalen is an assignment management platform that allows users to create, and manage tasks and assignments. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

2. Information We Collect

Account Information: When you create an account using GitHub OAuth, we collect your GitHub username, display name, and email address from your GitHub profile.

Assignment Data: We store assignments you create, including titles, descriptions, deadlines, and visibility settings (public or private). For private assignments, we also store the username of the user you assign access to.

Assignment Claims: We track which assignments you accept, decline, or mark as in-progress or finished.

Usage Data: We collect information about how you interact with the platform, including login times and assignment activity.

Messages: We store direct messages you send to other users, including message content, timestamps, and recipient information. Messages are not encrypted.

3. How We Use Your Information

We use your information to:

• Enable you to create and manage assignments
• Display your created assignments to other users (for public assignments)
• Restrict access to private assignments to only authorized users
• Track assignment status and completion
• Authenticate your account and maintain security
• Improve platform features and user experience
• Enable direct messaging between users

4. Information Sharing and Visibility

Public Assignments: When you create a public assignment, the title, description, deadline, and your display name as the creator are visible to all registered users of the platform.

Private Assignments: Private assignments are only visible to you and users you explicitly grant access to via their username.

Profile Visibility: Your display name and username are visible to all users.

Direct Messages: Messages are only visible to you and the recipient. Message content is stored in our database and is not encrypted.

Third-Party Services: We use Supabase, a secure database and authentication platform, to store and manage all user data. Supabase processes data on our behalf under strict confidentiality and security agreements. All data stored in Supabase is encrypted both at rest and in transit.

We do not sell, trade, or rent your personal information to any third parties. We may disclose your information only if required by law or to protect our rights and safety.

5. Data Security and Encryption

We take security seriously and implement industry-standard measures to protect all user data:

Authentication: Powered by Supabase Auth with GitHub OAuth
Encryption at Rest: All data is encrypted in the Supabase database using AES-256 encryption
Encryption in Transit: All data transmission uses HTTPS/TLS encryption
Database Security: Row-level security policies ensure users can only access their own data and authorized assignments
Infrastructure: Hosted on secure, SOC 2 Type II compliant infrastructure

GitHub OAuth: Your GitHub account credentials are handled securely by GitHub and Supabase. We never store your GitHub password. Authentication is delegated to GitHub's secure OAuth 2.0 protocol.

Messages: Direct messages are stored without encryption. Do not send sensitive information via messages that you would not want accessible by database administrators.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data using best practices, we cannot guarantee absolute security.

6. Your Rights and Data Control

You have full control over your data:

View and Edit: Update your profile information in account settings
Delete Assignments: Remove any assignments you created at any time
Control Visibility: Change assignment visibility between public and private
Manage Access: Add or remove users from private assignments
Account Deletion: Delete your account and all associated data
Delete Messages: Remove individual messages from your conversations

7. Cookies and Session Management

We use essential cookies to:

• Keep you logged in to your account
• Maintain your session security
• Remember your preferences

We do not use tracking cookies for advertising purposes.

8. Data Retention

We retain your account and assignment data for as long as your account is active. When you delete an assignment, it is permanently removed from our database. If you delete your account, all your data will be permanently deleted within 30 days.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify users of significant changes by posting a notice on the platform and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance.