Privacy policy

The short version

TRNCHub is a listings site for Northern Cyprus. We collect the details you type into a form, plus the minimum needed to keep the site working and secure. We do not sell your data, and we do not run advertising trackers.

If you would rather not have an account, you can browse every listing without one. An account is only needed to save items, post a listing or apply for a job.

What we collect

When you create an account

Your first and last name, email address, an optional phone number, and a hashed version of your password. We never store the password itself — only a bcrypt hash, which cannot be reversed back into your password.

When you submit a listing or apply for a job

Whatever the form asks for: the listing details, photographs you upload, and for job applications your CV, cover letter and contact details. Job applications are shared with the employer who posted the role — that is the point of applying — and we cannot control what they do with them afterwards.

When you enquire about a property

Your name, email, phone number and message. Property enquiries come to TRNCHub rather than to the property owner directly, and we pass on what is needed to answer you.

Automatically, on every visit

Your IP address and browser user-agent string. These are used for rate limiting, for detecting repeated failed logins, and in the activity log that records administrative actions. They are not used to build a profile of you or to follow you across other websites.

Why we use it

To run your account — signing you in, remembering saved listings, sending confirmation and password-reset emails.
To publish what you submit — every listing is reviewed by us before it appears.
To connect people — passing an enquiry to the right person, or an application to the employer.
To keep the site secure — rate limiting, login lockouts and abuse detection.
To send the newsletter, but only if you asked for it. Every newsletter has a one-click unsubscribe link.

Cookies

We set as few as we can get away with:

Cookie	Purpose	Lifetime
`trnchub_session`	Keeps you signed in and carries the CSRF token that protects forms from being submitted by another site.	Session, expiring after 1 hour idle
`trnchub_remember`	Set only if you tick “Remember me”. Holds a random token, never your password.	30 days
`googtrans`	Records which language you chose in the translation switcher.	Session

All are strictly necessary for the features they support, so there is no consent banner to click through. We run no analytics, advertising or social-media tracking cookies.

Third parties

A few things on the page are loaded from other companies, which means those companies can see your IP address:

OpenStreetMap — map tiles on listing and directory pages. Loaded only when you scroll a map into view.
GTranslate and Google Translate — used when you pick a language other than English.
Google Fonts and cdnjs — the typeface and icon set.

We do not share your account details, enquiries or applications with any of them. We do not sell personal data to anyone, for any purpose.

How long we keep it

Account details — until you ask us to delete them.
Listings — while published, then archived. Deleted listings are soft-deleted first so a mistake can be undone, and purged after 30 days.
Enquiries and applications — up to 24 months.
Failed login records — cleared as soon as you sign in successfully, or after the lockout window expires.
Newsletter subscription — until you unsubscribe.

Your rights

You can ask us to:

Show you a copy of everything we hold about you.
Correct anything that is wrong — most of it you can edit yourself under account settings.
Delete your account and its data.
Stop sending you the newsletter.

Email us and we will action it within 30 days. We will not ask you to justify the request.

One exception: where we are required to keep a record — for example a transaction we are legally obliged to retain — we will tell you what is being kept and why.

Security

Passwords are hashed with bcrypt. The site is served over HTTPS. Every database query uses prepared statements, forms are protected against cross-site request forgery, and an account is locked for 15 minutes after five failed sign-in attempts.

No system is perfect. If you find a security problem, please email us before disclosing it publicly, and we will fix it as quickly as we can.

Children

TRNCHub is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will remove it.

Changes

If this policy changes in a way that materially affects you, we will say so on the site and update the date at the top of this page. Continuing to use TRNCHub after a change means you accept the revised policy.

Contact

Questions, corrections or deletion requests: hello@trnchub.com, or through the contact form.

This policy describes how the site actually behaves. It is not legal advice, and it is not a substitute for review by a lawyer familiar with data protection law in the TRNC and any other jurisdiction you operate in.