Privacy policy
Last updated 27 October 2026
OPC Account lets you sign in to apps and websites with one account. This policy explains what we collect, why, and the choices you have. It applies to the OPC Account service at https://openproject.click. Each app you sign in to has its own privacy policy for the data it keeps.
What we collect
- Account details: your name, username, email address, date of birth, and a password stored only as a secure one-way hash. We never see or keep your actual password. We use your date of birth to check you're old enough for an account, and share it only with apps you allow to see it.
- Profile photo (optional): stored as a small square image with all hidden data, such as camera details and location, removed. Apps you allow to see your profile can show it.
- Sign-in and security data: IP address, browser and device type, and the time of sign-ins and account changes. We use this to protect your account, for example to email you about a sign-in from a new device.
- App connections: which apps you have allowed to use your OPC Account, and what they can see.
- Cookies: only cookies needed to keep you signed in, protect forms, and recognise devices you've used before. No advertising or tracking cookies.
How we use it
- To create your account, sign you in, and sign you in to apps you choose.
- To send account emails: confirming your email, password resets, sign-in codes and security alerts.
- To detect and prevent fraud and unauthorised access.
We use your data because it's needed to provide the service you signed up for, and to keep it secure. We don't sell your data or use it for advertising.
What apps receive
When you sign in to an app with OPC, it receives only what the consent screen showed: a unique id for you and, if you allowed it, your name and email address. You can remove an app's access at any time on your account page.
How long we keep it
- Account details: until you delete your account.
- Security activity: 180 days.
- Backups: up to 14 days, then deleted automatically.
Your rights
Under Thailand's Personal Data Protection Act (PDPA) and similar laws, you can ask to see, correct, or delete your data, or object to how it's used. You can change your name and email and delete your account yourself on your account page. Deleting your account removes your data and disconnects every app.
Security
Passwords are hashed, connections use HTTPS, and you can turn on 2-step verification. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you as the law requires.
Contact
Questions or requests: developer.vasapol@gmail.com