Privacy statement

Introduction

Opvango is a childcare marketplace in the Netherlands. We help parents find childcare and childcare providers manage their offering. This page explains what data we process about you, why we process it and what your rights are.

What data do we process?

• Account: name, email address and preferred language
• Applications: your child's first and last name, date of birth, desired start date, requested care periods and any free text you add to the application
• Communication: messages you send and receive through Opvango
• Search behaviour: your searches on Opvango (search terms, place or postcode, selected filters and number of results), which childcare locations were displayed, and which places, locations, favourites, comparisons or application steps you selected. Interaction records do not contain an IP address, session ID or free text. We link searches to your parent account only when you have consented to this in your privacy settings
• Technical data: browser information, language preference, usage statistics, masked session recordings and sanitised error and performance measurements. PostHog uses a random browser ID, not an account ID, name or email address. Existing consent logs contain only a shortened hash of the IP address

Why do we process this data?

• To provide the service (performance of our agreement with you)
• To route your applications to the correct childcare provider
• To comply with legal obligations, including accounting and retention requirements
• To improve search and childcare availability using search behaviour, for example by identifying areas where parents search without finding suitable availability (legitimate interest)
• To improve usability and technical performance using usage statistics and masked session recordings

We may share aggregated market insights with childcare providers, such as how many times a location in a place was displayed or selected. Providers never receive raw search records, full postcodes, information about individual parents or children, or insights based on a group that is too small.

When you apply, childcare providers may see an engagement indicator: an internal supporting score based on how complete your application is, such as whether you added a start date, care periods, an explanation or a document. This indicator is supporting information only and never makes an automated decision about your application. A member of the provider's staff always makes that decision.

Usage statistics and browser storage

We use PostHog in the EU to improve Opvango. Measurement starts automatically. We measure page visits, navigation, interactions, click patterns (heatmaps), repeated and unresponsive clicks, and technical performance (Web Vitals).

PostHog stores a random browser ID in localStorage and session metadata in sessionStorage, without analytics cookies. This lets us recognise repeat visits in the same browser, without linking different devices. The browser ID resets when you sign out or switch accounts. We do not send an account ID, name or email address or create person profiles.

Attribution uses only the sanitised referring domain and predefined allowed campaign values, not the full referring URL or other URL parameters. Error measurements contain the error type and sanitised code locations; error messages and local variables are redacted. Network measurements contain only timings and sanitised metadata, without headers or request and response bodies.

PostHog also supports feature flags and experiments. This technical capability does not automatically create or publish an experiment or survey. Surveys send only ratings and answers from fixed choices, not free text.

Masked session recordings

Session recordings start automatically on public pages and screens for parents and childcare providers to investigate navigation problems. All text, input fields and attribute values are masked. Images, media and embedded frames are blocked. The masked recording continues through login, enrollment and navigation between screens. Document contents and embedded media are not recorded. We do not collect console logs, screenshots, audio or video.

Recordings use the same random browser ID as usage statistics and are not linked to your account. We retain masked session recordings for up to 30 days.

Retention periods

• Account data: up to 12 months after your account is closed
• Applications: up to 24 months after the latest status update
• Search behaviour and interactions: up to 12 months. If you delete your account, linked search history is detached immediately and can no longer be traced back to you
• Cookie consent: up to 24 months. The consent audit record is then deleted automatically
• Masked session recordings: up to 30 days

Sub-processors (third parties we use)

• Laravel Cloud (hosting, EU region) — database and file storage
• Resend (transactional email) — delivery of confirmation emails and magic links
• PostHog (analytics and session recordings, EU region) — usage statistics and masked session recordings without analytics cookies, account ID, name, email address or person profile
• Cloudflare Turnstile (bot detection during registration and magic-link requests) — receives your IP address and a browser challenge, but no username or email address
• PDOK / PostcodeAPI (Dutch land registry and address geocoding) — receives postcode and house number to determine map locations, but no children's data
• Google Maps Platform (route and travel-time calculation) — receives the coordinates of the entered address and selected childcare locations, plus the travel mode, but no names or child data
• Sentry (error monitoring, EU region), when enabled

Your rights

You have the right to access, correct and delete your data and to object to processing. Email [email protected] to exercise these rights.

Contact

Do you have questions or complaints? Email [email protected]. We respond within 14 days. You can also contact the Dutch Data Protection Authority.

Recently viewed childcare locations

To help you continue searching, we remember up to twelve recently viewed childcare locations for thirty days. For visitors, this list is stored in the encrypted opvango_recent_daycares cookie in their browser. For signed-in parents, we store the list in their account so it is available on other devices. It contains only childcare locations and when you viewed them. Use ‘Clear history’ in Recently viewed to remove the list. Usage measurements for Recently viewed use the PostHog statistics described above, with a random browser ID.