Island Edu

Privacy Policy

Last updated: May 2026

1. Who we are

Island Edu is a school discovery platform for Cyprus, operated by Lauren Molloy, Cyprus. If you have any questions about this policy, you can reach us at lmolloy.molloy@gmail.com.

2. What data we collect

  • Your name and email address when you create an account.
  • The schools you save to your favourites list.
  • Anonymous usage data via Vercel Analytics — no personal identifiers are collected.
  • If you are a school administrator: your school's listing details (name, contact info, description, photos, etc.).

3. Where school listing data comes from

School information is sourced from the Cyprus Ministry of Education public records. This is publicly available data. Director names are not included in our listings.

4. How we use your data

  • To provide and maintain the Island Edu service.
  • To send you account-related emails (email verification, password reset). We do not send marketing emails without your explicit consent.
  • To improve the platform using anonymous, aggregated analytics.

5. Who we share data with

We use the following trusted third-party services:

  • Vercel — hosting and analytics (EU infrastructure)
  • Stripe — payment processing and fraud prevention
  • Resend — transactional email delivery
  • Cloudflare — file storage (photos, logos)
  • Mapbox — map display (your IP address is sent to Mapbox when viewing maps)
  • Neon — database hosting

We do not sell your data to any third party.

6. How long we keep your data

  • Account data is kept for as long as your account remains active.
  • You can request deletion of your account and all associated data at any time.

7. Your rights

Under GDPR, you have the right to access, correct, delete, and export your personal data. To exercise any of these rights, email us at lmolloy.molloy@gmail.com.

You can also delete your account directly from the Settings page.

8. Cookies

We do not use advertising or tracking cookies. The cookies below are the only ones set.

Essential (always active)

next-auth.session-token

Keeps you logged in during your visit.

next-auth.callback-url

Remembers where to send you after login. Deleted after login completes.

Payment — Stripe (loads on payment pages only)

__stripe_mid

Fraud prevention. Duration: 1 year.

__stripe_sid

Fraud prevention. Duration: 30 minutes.

Mapbox (loads when viewing school maps)

No persistent cookies are set, but your IP address is transmitted to Mapbox to serve map tiles.

Vercel Analytics is cookieless — no cookie is set.

9. Contact

For any questions about your data or this policy, email lmolloy.molloy@gmail.com. We aim to respond within 72 hours.