Privacy Policy

Last updated: 20 September 2026

Youth Works Hub ("we", "our", "us") operates youthworkshub.org. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

This policy covers both the website at youthworkshub.org and the Youth Works Hub mobile app for iOS and Android. They are one service and they use the same accounts and the same data.

By using Youth Works Hub, you agree to the practices described in this Privacy Policy.

You can browse without an account. Reading opportunities, articles and organisation profiles requires no sign-in and no personal data.

🔹 Account data — if you create an account: your name, email address, and optionally a profile photo, a short bio, a country and a username. If you sign in with a password, we store a cryptographic hash of it and never the password itself.

🔹 Sign-in provider data — if you sign in with Google or with Apple, we receive your email address, your name, an identifier that is unique to you for this service, and (from Google) your profile picture. If you use Apple's Hide My Email, Apple gives us a forwarding address instead of your real one, and that is all we ever see.

🔹 Things you create — saved opportunities, likes, comments, the organisations you follow, and anything an organisation account submits for publication.

🔹 Notification data — if you allow notifications in the mobile app, we store the push token your device is given by Apple or Google, together with the platform it came from, so we can send you a notification. Deleting the app, turning notifications off, or signing out removes it.

🔹 Device and session data — when you sign in we record the browser or device description and the times you signed in and were last active, so you can see where you are signed in and end a session you do not recognise. You can see this list yourself under Security.

🔹 Contact data — your name, email address and message if you write to us through the contact form.

🔹 Newsletter data — your email address, and your name if you give it, if you subscribe. You can remove yourself at any time at youthworkshub.org/unsubscribe.

🔹 Usage measurements — see How we measure the site below, which explains exactly what is recorded and what is deliberately not.

We do not collect sensitive personal data, and we do not ask for your date of birth, your address or any payment details.

🔹 To run the service — to sign you in, keep you signed in, and show you your saved items, follows and comments
🔹 To send notifications you asked for, such as a reply to your comment or a new post from an organisation you follow
🔹 To respond to your enquiries and messages
🔹 To understand which opportunities and searches people find useful, so we can publish better ones
🔹 To moderate the platform and act on reports
🔹 To comply with our legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes, and we do not use your data to build an advertising profile of you.

We want to know which opportunities people open and what they search for, because that is what tells us what to publish. We do this in the most limited way we could find, and it is worth describing precisely:

🔹 We record search terms, which posts were opened, and which category tab was chosen. Nothing else — we do not record page views in general.
🔹 These are grouped by a random identifier that lives only in your browser tab. It is discarded when you close the tab, it is not a cookie, and it does not follow you between visits, between devices, or to any other website.
🔹 We do not store your IP address, your browser's user agent, the page you came from, or any device fingerprint alongside these measurements.
🔹 They are deleted after 90 days.

The honest cost of doing it this way: two browser tabs count as two visits. We accept that inaccuracy because the alternative is tracking you, and we would rather have a rougher number.

This cookieless measurement is our own and it is not the only one: we also use Google Analytics 4 (measurement ID G-N5D3K652ZW) on the website, and the site is funded by Google AdSense. Both may set third-party cookies; analytics storage is off by default and is only enabled if you agree to it. Neither is used in the mobile app, which shows ads through Google AdMob and asks your permission first.

We process your data on the following legal bases under GDPR:

🔹 Contract — to provide the account and the features you signed up for
🔹 Legitimate interests — to operate, secure, moderate and improve our platform
🔹 Consent — where you have explicitly given it, such as the newsletter and push notifications; you can withdraw it at any time
🔹 Legal obligation — where required by law

Cookies are small text files stored on your device. Youth Works Hub sets three cookies of its own, all of them essential, and only once you sign in. None of our own cookies is used for analytics or advertising:

🔹 ywh_session — keeps you signed in
🔹 ywh_chrome — records only whether your account is an ordinary member or an administrator, so the page can be laid out correctly before it is drawn
🔹 ywh_dev — lets us recognise a device you have used before, so we can warn you when your account is used somewhere new

Google also sets third-party cookies for advertising (Google AdSense) and analytics (Google Analytics 4). Where consent is required — the EEA, the UK and Switzerland — you are asked through Google's consent message before those cookies are used, and you can change your answer at any time from that message. You can also control or delete cookies through your browser settings; deleting ours will sign you out.

We use the following third-party services, and only these:

🔹 Google AdSense — serves the advertising that funds the site, and may set cookies to choose and measure ads.
🔹 Google Analytics 4 — tells us which pages are opened and how visitors reach the site. Analytics storage is off until you agree to it.
🔹 Google AdMob — serves advertising in the mobile app.
🔹 Google Sign-In — if you choose to sign in with Google. Google tells us your email address, name, profile picture and a unique identifier. See Google's privacy policy.
🔹 Sign in with Apple — if you choose to sign in with Apple. Apple tells us your email address (or a forwarding address, if you use Hide My Email), your name the first time only, and a unique identifier. See Apple's privacy policy.
🔹 Firebase Cloud Messaging (Google) and Apple Push Notification service — to deliver notifications to the mobile app, if you have allowed them. They receive the push token for your device and the content of the notification.
🔹 Our email provider — to send verification codes, security warnings, replies and the newsletter.

Youth Works Hub also contains links to third-party websites, including official Erasmus+ and ESC programme pages, hosting organisation websites, and application portals. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before submitting any personal data.

Your data is stored on servers we operate, and is not copied to any other party except the services listed above. Where one of those services processes data outside the European Economic Area, that transfer relies on the safeguards that provider has in place.

🔹 Account data — kept while your account exists, and deleted when you delete it
🔹 Usage measurements — deleted after 90 days
🔹 Contact messages — kept while we are dealing with your enquiry and for a reasonable period afterwards, and deleted with your account if you had one
🔹 Newsletter — kept until you unsubscribe. If you unsubscribe we keep a record of that fact, so that a later import cannot put you back on the list without your asking

You can delete your account yourself, at any time, without asking us: on the website go to Security → Delete my account, and in the mobile app go to Profile → Delete account. It takes effect immediately and it cannot be undone.

Deleting your account removes your profile, your sign-in details, your saved opportunities, likes and follows, your notification settings and push tokens, any usage measurements linked to you, any message you sent us, and your newsletter subscription. Two things are kept, both with your name removed so they cannot be traced back to you: comments you wrote stay on their posts, because deleting them would leave holes in other people's conversations, and anything you reported stays in the moderation record. If your account owns an organisation, the organisation and its published posts remain on the site but lose their owner — please write to us first if someone else should take them over.

If you are located in the European Economic Area, you have the following rights regarding your personal data:

🔹 Right of access — to request a copy of the data we hold about you
🔹 Right to rectification — to request correction of inaccurate data
🔹 Right to erasure — to request deletion of your data; you can also do this yourself, see above
🔹 Right to restrict processing — to request that we limit how we use your data
🔹 Right to data portability — to receive your data in a portable format
🔹 Right to object — to object to our processing of your data
🔹 Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at contact@youthworkshub.org. We will respond within 30 days. You also have the right to complain to your national data protection authority.

Youth Works Hub is intended for people aged 13 and over. We do not knowingly collect personal data from children under 13. In some countries a higher age of consent applies to online services; where that is the case, please use Youth Works Hub only with the permission of a parent or guardian. If you believe a child under 13 has given us personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

📧 contact@youthworkshub.org
🏢 Youth Works Hub