Privacy

1. What we collect, and why

Developers browsing the board

Nothing that identifies you. You don't need an account, and we never ask for a CV, a name or a phone number.

Our servers keep standard access logs (IP address, browser type, pages requested, time) for security and to keep the site running. Logs are deleted after 30 days.

We count how many times each listing is viewed and how many people click through to apply. These counts don't identify you.

If you accept analytics (see section 4), we also collect anonymous usage data: which pages are visited, in what order, and which lead to an apply click. This is aggregated and can't be traced back to you. Nothing is collected until you accept, and declining changes nothing about how the board works.

Developers who sign up for the Monday email

• Your email address, so we can send you the Monday email.
• Confirmation details: the time you signed up and the time you confirmed, so we can show you asked for it.
• Whether each email was delivered, so we can stop sending to addresses that bounce. We don't track whether you opened an email or which links you clicked.

We send the Monday email and nothing else. You can unsubscribe from any email in one click, and we delete your address within 30 days of unsubscribing.

Players of the game

The game on the site has a public leaderboard. If you save a score:

• The name you choose, your score, your level and the time you saved it are shown publicly on the leaderboard. Pick a name you're happy to have public; it doesn't need to be your real one.
• Your email address, only if you choose to verify your name. We send a link that works once and expires in 24 hours. Clicking it adds a tick to your name so nobody else can pass off your score. The address is never shown, is not added to the Monday email or any other list, and is used for nothing except sending that one link. It's kept so the verified tick stays tied to your entry.

Your best score is also remembered in your own browser (see section 4), not on our servers.

You can ask us to remove or rename a leaderboard entry at any time by emailing hello@oopjobs.com.

Employers and recruiters

• Your email address, used to sign you in, and to send sign-in links, invoices, expiry reminders and notices about your listings.
• Your company or agency name, and your billing name, shown on your invoices and, for the hiring company, on your listings.
• The content of your listings, including the role, salary range, location, stack, description and where applicants should go. Listings are public by design.
• Payment records: the amount, date, method and reference of each payment, and the last four digits of a card. Card numbers go directly to our payment provider; we never see or store them. For EFT payments we see the payment reference and the paying account name that appears on our bank statement.
• Account activity: sign-in times and the IP address a sign-in came from, so we can spot misuse.

Applicants

When you apply for a role you leave our site and go to the employer. We don't receive your application, your CV or anything about you. The employer is the responsible party for that information, and their privacy practices apply.

2. The legal basis for processing

Under POPIA we process personal information because:

• it's needed to carry out the agreement we have with you (publishing listings, sending invoices, signing you in);
• you've consented (the Monday email, analytics, and verifying a leaderboard name), and you can withdraw that consent at any time;
• we have to by law (keeping financial records);
• it's in our legitimate interest to keep the site secure and working (access logs, sign-in records), in a way that doesn't override your rights.

3. Who we share it with

We don't sell personal information, and we don't share it with advertisers.

We use a small number of service providers who process information on our behalf and only on our instructions:

• A payment processor, for card payments. It receives your card details directly and is responsible for them under its own policy.
• An email delivery service, for sending sign-in links, invoices, verification links and the Monday email.
• An analytics service, only if you've accepted analytics. It receives anonymous usage data and no email addresses or account details.
• Hosting and network providers, for our servers, DNS and traffic protection.
• Our bank, for EFT payments.

We don't name them here because they can change, and we'd rather this policy didn't go stale. Email hello@oopjobs.com and we'll tell you who they are today.

Some of these providers store information outside South Africa. Where they do, we rely on section 72 of POPIA: the provider is bound by contract to protect the information to a standard at least as good as POPIA requires.

We'll disclose personal information if the law requires it, for example in response to a court order or a lawful request from a regulator.

4. Cookies, analytics and browser storage

Cookies. Signed-in employers get one cookie, which keeps you signed in for up to 30 days. It holds a random session identifier and nothing else. Signing out deletes it. Nobody else gets a cookie from us.

Analytics. When you first visit, we ask whether you'll allow anonymous analytics so we can see which pages help developers find roles. Nothing loads unless you accept. If you accept, the analytics tool records page views and apply clicks without identifying you and without tracking you across other sites. You can change your answer at any time from the Cookies link in the footer. Some conveniences, such as the guided tour, only run once analytics is accepted, because they use the same tooling.

Browser storage. The site keeps a few small things in your own browser's storage, not on our servers: your cookie choice, whether you've seen the guided tour, and, if you've accepted analytics, your best game score. Nothing in that storage identifies you, and we can't read it. Clearing your browser's site data removes it.

5. How long we keep it

• Access logs: 30 days.
• Analytics data: aggregated and anonymous; kept for 24 months.
• Monday email addresses: until you unsubscribe, then deleted within 30 days.
• Leaderboard entries: until you ask us to remove them, or until we retire the game. Verification emails are kept for as long as the entry they verify.
• Listings: public for 30 days, then kept in your dashboard for a year so you can repost, then deleted.
• Account details: for as long as the account is open. If you ask us to close your account, we delete your details within 30 days, except what we have to keep by law.
• Invoices and payment records: five years from the end of the tax year they relate to, as the Tax Administration Act requires. These are kept in an archive and used only for accounting and tax purposes.

6. How we protect it

Information travels over encrypted connections. Sign-in is by single-use link rather than password, so there's no password for us to lose. Access to systems holding personal information is limited to the people who need it to run the site. If a breach ever affects your information, we'll notify you and the Information Regulator as POPIA requires.

7. Your rights

Under POPIA you can:

• ask what personal information we hold about you and get a copy;
• ask us to correct it;
• ask us to delete it, unless we have to keep it by law;
• object to processing based on our legitimate interests;
• withdraw consent to the Monday email, to analytics or to a leaderboard entry at any time;
• complain to the Information Regulator.

To exercise any of these, or to raise anything else about this policy, email hello@oopjobs.com. That address reaches our information officer directly. We'll respond within 30 days. We'll need to confirm you are who you say you are, usually by replying from the email address on the account or entry.

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
enquiries@inforegulator.org.za
https://inforegulator.org.za

Our PAIA manual, which explains how to request records under the Promotion of Access to Information Act, is available at https://oopjobs.com/paia.

8. Children

OOP Jobs is for working developers and the companies that hire them. It's not meant for anyone under 18, and we don't knowingly collect information from children. If you believe a child has given us their email address or saved a score, let us know and we'll delete it.

9. Changes to this policy

If this policy changes in a way that affects you, we'll email account holders and Monday email subscribers before the change takes effect. The "Last updated" date at the top will change. Earlier versions are available on request.

10. Contact

Kartlani (Pty) Ltd (registration number 2026/531252/07), trading as OOP Jobs

Information officer: hello@oopjobs.com